Has anyone seen this yet? RealPHX.COM??

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • bosch
    Registered User
    • Oct 2003
    • 78

    #1

    Has anyone seen this yet? RealPHX.COM??

    They're promoting freeticketcash which I'm sure they'll be pretty happy about, but check this out, the site a) changes your homepage to realphx.com and b) if you're running AIM puts a giant link to realphx.com in your info, then, uses scare-tactics to get teens and their friends to signup...

    URL: http://realphx.com/

    Pretty shitty...
  • X37375787

    #2
    It didn't change shit.

    Comment

    • winter
      Confirmed User
      • May 2001
      • 570

      #3
      Norton internet security popped up a malicious script warning for me... nothing changed.

      Comment

      • bigdog
        Confirmed User
        • Jul 2001
        • 6964

        #4
        so i guess this is some aim exploit then

        Comment

        • bosch
          Registered User
          • Oct 2003
          • 78

          #5
          Originally posted by winter
          Norton internet security popped up a malicious script warning for me... nothing changed.
          No clue, circled around the office in no time, but nobody's updated Norton in a long while, I want to see someone post that had it change their homepage and aim profile. The homepage script's everywhere but i havent seen the aim one before. Also for the freeticketcash guys the id's RyanCom
          Last edited by bosch; 10-09-2003, 04:34 PM.

          Comment

          • hyatla
            Confirmed User
            • Oct 2003
            • 1720

            #6
            Nasty.
            <a href="http://click.dtiserv2.com/Click/1125-99-us979" target="_blank">DTI cash: Top Asian Sponsor, $75 to new affiliates</a><br>
            <br>
            ICQ: 274731765

            Comment

            • bosch
              Registered User
              • Oct 2003
              • 78

              #7
              hmmm, looks like it installs an executable too if your ie isnt patched right, and then keeps changing your homepage till you get rid of the file, pretty scummy

              Comment

              • buddyjuf

                #8
                Originally posted by bosch
                hmmm, looks like it installs an executable too if your ie isnt patched right, and then keeps changing your homepage till you get rid of the file, pretty scummy
                I opened the page
                can I plz know the name of that file?
                thanx

                Comment

                • bosch
                  Registered User
                  • Oct 2003
                  • 78

                  #9
                  its had a short name and stated with an A, just pull up task manager and end task all of them

                  Comment

                  • buddyjuf

                    #10
                    Originally posted by bosch
                    its had a short name and stated with an A, just pull up task manager and end task all of them

                    av.exe
                    installs in C:\

                    thanx :D

                    Comment

                    • Project-Shadow
                      Confirmed User
                      • Feb 2003
                      • 7340

                      #11
                      Good ole google bar.. ^_^

                      Comment

                      • buddyjuf

                        #12
                        guys this fucking shit is not getting off my pc

                        how the fuck do I take it off


                        and bosch, why the fuck would you post a link that infects your pc in the first place?

                        Comment

                        • reynold
                          Too lazy to set a custom title
                          • Oct 2002
                          • 51271

                          #13
                          I won't open it

                          Comment

                          Working...