Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar Mark Forums Read
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 11-01-2001, 12:23 PM   #1
ldinternet
Confirmed User
 
Join Date: Apr 2001
Posts: 8,245
SexTracker counter is infected with "JS.Seeker" virus

I just got an email from a surfer telling me that my SexTracker counter is infected with the JS.Seeker virus.

Anyone got anymore information JS.Seeker and what exactly it is trying to do?
ldinternet is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-01-2001, 12:26 PM   #2
Osholio
Confirmed User
 
Join Date: Sep 2001
Location: UK
Posts: 99
From http://vil.mcafee.com/dispVirus.asp?virus_k=98882&

Quote:
This trojan alters the default startup and search pages for your web browser. The Windows Scripting Host must be installed for the trojan to run. It is believed that a script generating program may be involved in the creation of this trojan, which
allows the author to specify different parameters. As there are many variants of this threat, your personal experiences may vary from those mentioned here. The trojan may arrive as a file named "runme.hta". Opening this file makes several registry changes to your system, such as:
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
HKCU\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
HKCU\Software\Netscape\Netscape Navigator\Main\Home Page

Original registry values are saved to the files "HOMEREG111.REG", "BACKUP1.REG", and "BACKUP2.REG" in the WINDOWS directory.
Today, I'm the fount of all knowledge, I shall run dry shortly.

------------------
ClickCash - Better than 1:99 and $50 for signing up
Lightspeed Cash - Converts like crazy
Osholio is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-01-2001, 12:30 PM   #3
ldinternet
Confirmed User
 
Join Date: Apr 2001
Posts: 8,245
Sextracker is trying to change the homepage? Is this info correct?
ldinternet is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-01-2001, 12:32 PM   #4
Osholio
Confirmed User
 
Join Date: Sep 2001
Location: UK
Posts: 99
Quote:
Originally posted by ldinternet:
Sextracker is trying to change the homepage? Is this info correct?

The info on JS.Seeker is correct, I don't know if sextracker is infected by it or trying to exploit the same loophole it uses.

I use Mozilla to browse, no worries about pop-up hell or virii

------------------
ClickCash - Better than 1:99 and $50 for signing up
Lightspeed Cash - Converts like crazy
Osholio is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >

Bookmarks
Thread Tools



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.