Thank you GFYmember MR2/mr2creationz for trying to steal our login/passwords
 

www.mr2cre |remove| ationz.com
user: MR2


Their site tries to install two trojan downloaders + Trojan.Galapoper.A


site is till up after I told you about it on ICQ


Thank you for trying to steal our user names and passwords

..............................
ICQ log:

[15:43] MR2Creationz: Hi, how can i help you ?
[15:43] Ebus_dk | GFY: you got spyware infected on your website
(Link: http://www.mr2creationz.com/)http://...creationz.com/
[15:43] MR2Creationz: ewww
[15:44] MR2Creationz: will sort that out sorry
[15:44] Ebus_dk | GFY: its a keylogger - I dont think the people visiting the site from GFY appriciate havng the usernames and passwords liftet from their affiliate sites
[15:45] MR2Creationz: hmm..
[15:47] Ebus_dk | GFY: its a trojan called Galapoper.a
[15:47] Ebus_dk | GFY: proberly embedded in a banner or iframe somewhere
[15:48] MR2Creationz: thanks for the heads up man, will ask my partner to look into this

trojans suck thanks for the heads up

well maybe he really didn't know that..

...then he should quit his design page, and open a doughnut shop

heya, i don't know anything about trojans that's why i didn't do anything and i was waiting for my partner since he is the one in charge of our website.

anyway, you could've just told me that it's that serious so i can put it down myself :thumbsup

main page is offline now.

I'll think about the doughnut shop :1orglaugh

Thank you for taking it down.

"its a keylogger - I dont think the people visiting the site from GFY appriciate havng the usernames and passwords liftet from their affiliate sites" dont se how you can think its NOT serious


all that matter is thats its gone now... but it sucks to be one of the webmasters who now have at least one keylogger installed..

Congrats to the winners

Perhaps post a link to software that will remove it for those that got it?

newsflash man. peoples sites get hacked all the time. There's plenty of people on gfy and many other boards that will tell you some how a chunk of malicious JS ended up on their pages.

But, who's really at fault isn't the concern here...Pointing a finger at a GFY member gets more views...

im staying well away
good you made this public i saw you trying to tell him in another thread

let me give you a clue.

I told him in privat, but he dident do anything about it. He then posted links to the site here on the board risking new cases of infected computers. So I did what I had to do to stop it.

This got his attention, and the problem is fixed now.

Unlike you, I dont give a shit about sigviews because they are not business to me. I make money from my surfers, not from whoring my signature