Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
smutserver installs trojans? smutserver installs trojans?
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 05-10-2004, 02:15 AM   #1
Stramm
Confirmed User
 
Join Date: Jan 2003
Location: NL
Posts: 342
smutserver installs trojans?
do they do that weird stuff? I just came across two galleries hosted there and my firewall drove nuts.
Stramm is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 02:34 AM   #2
Stramm
Confirmed User
 
Join Date: Jan 2003
Location: NL
Posts: 342
that's a ja.va scr.ipt incl.ude on some of their sites
http://www3.smutserver.com/anal/badar/helpf.php (check source)

it opens an ifr.ame http://www3.smutserver.com/anal/badar/helpf.php (don't click unless you have a firewall) that tries to install a trojan

a sample page (!!! installs trojan) http://www22.smutserver.com/cumshots/lake/

view the source and you'll see the scri.pt gets hahahahahahahad in the smutserver top banner code
Stramm is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 03:03 AM   #3
GigaXXX
Confirmed User
 
GigaXXX's Avatar
 
Join Date: Apr 2004
Location: Europe
Posts: 872
???????? ???????????? ????????? ??? ???????????????? ???????? ??????? ??? ?? ?????? ? ????? .
__________________
Free Domain Analysis Tool @ WebBoar.com. Domain worth, Same IP Domains, Google Analytics etc
GigaXXX is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 03:07 AM   #4
Shoplifter
Richest man in Babylon
 
Shoplifter's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: Posts: 10,002
Posts: 5,729
Is it the cws.searchx trojan? I am wondering where that is coming from all the time.
Shoplifter is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 03:09 AM   #5
Mr. Marks
Confirmed User
 
Join Date: Jun 2001
Location: Wherever I want
Posts: 7,517
AWW FUCK! Boycott Smutservers and contact their sponsors. Fuck that shit!!!!
Mr. Marks is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 03:46 AM   #6
bizmak
So Fucking Banned
 
Join Date: Apr 2004
Posts: 10,014
trojans are very popular stuff. but for smutserver i didn't hear until now.
bizmak is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 03:49 AM   #7
TheSwed
Confirmed User
 
TheSwed's Avatar
 
Join Date: Feb 2004
Location: Sweden.
Posts: 3,483
Hmm
TheSwed is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 06:25 AM   #8
Stramm
Confirmed User
 
Join Date: Jan 2003
Location: NL
Posts: 342
Quote:
Originally posted by Shoplifter
Is it the cws.searchx trojan? I am wondering where that is coming from all the time.
it's the vbs.trojan.psyme
Stramm is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 06:26 AM   #9
Babel
Confirmed User
 
Join Date: Apr 2004
Posts: 1,457
is that just 1 user or across all servers?
__________________
Babel is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 06:36 AM   #10
Stramm
Confirmed User
 
Join Date: Jan 2003
Location: NL
Posts: 342
from what I've seen it's on all their servers/ sites, even on hosted domains. However thy seem to have removed it now
Stramm is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 06:42 AM   #11
the real magoo
So Fucking Banned
 
Join Date: Sep 2001
Location: EU
Posts: 1,637
What happened to smutserver anyway? They used to be best freeserver out there a couple of years ago and now they just suck
the real magoo is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 07:22 AM   #12
Mike-BP
Confirmed User
 
Join Date: Mar 2003
Posts: 1,270
bump
__________________
Thanks to: ISPrime.com - best hosting company without downtime
Mike-BP is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 07:28 AM   #13
<IMX>
Confirmed User
 
Join Date: Jun 2002
Posts: 2,728
<IMX> is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 07:50 AM   #14
SmutServer
Registered User
 
Join Date: Dec 2003
Posts: 23
somebody added an i-frame (dont ask me how or who)
to this file to many of the servers headers
http://www3.smutserver.com/anal/badar/helpf.php

decode this and you will get this:
http://66.98.248.63/exploit.htm
using chm at http://66.98.248.63/EXPLOIT.CHM
which loads and e-xecutes this file http://66.98.248.63/exploit.exe

dont click/open any of those urls.. trojans!

the latest norton antivirus did not find anyhting wrong with this exe, so its either a custom coded trojan or a very new trojan.

we are working on the problem.
sorry for the problems.

any help (on who this IP belongs to for example) is greatly appreciated
Last edited by SmutServer; 05-10-2004 at 07:52 AM..
SmutServer is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 07:53 AM   #15
JamesK
hi
 
Industry Role:
Join Date: Jun 2002
Posts: 16,731
Quote:
Originally posted by SmutServer
somebody added an i-frame (dont ask me how or who)
to this file to many of the servers headers
http://www3.smutserver.com/anal/badar/helpf.php

decode this and you will get this:
http://66.98.248.63/exploit.htm
using chm at http://66.98.248.63/EXPLOIT.CHM
which loads and hahahahahahahas this file http://66.98.248.63/exploit.exe

dont click/open any of those urls.. trojans!

the latest norton antivirus did not find anyhting wrong with this exe, so its either a custom coded trojan or a very new trojan.

we are working on the problem.
sorry for the problems.

any help (on who this IP belongs to for example) is greatly appreciated
__________________
M3Server - NATS Hosting
JamesK is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 08:15 AM   #16
SmutServer
Registered User
 
Join Date: Dec 2003
Posts: 23
http://www.whois.sc/66.98.248.63

66.98.248.63

Record Type: IP Address
IP Location: United States - Texas - Houston - Everyones Internet Inc
Reverse IP: No websites hosted using this IP address

OrgName: Everyones Internet, Inc.
OrgID: EVRY
Address: 2600 Southwest Freeway
Address: Suite 500
City: Houston
StateProv: TX
PostalCode: 77098
Country: US

NetRange: 66.98.128.0 - 66.98.255.255
CIDR: 66.98.128.0/17
NetName: EVRY-BLK-14
NetHandle: NET-66-98-128-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.EV1.NET
NameServer: NS2.EV1.NET
Comment:
RegDate: 2003-07-02
Updated: 2004-02-06

TechHandle: RW172-ARIN
TechName: Williams, Randy
TechPhone: +1-713-400-5400
SmutServer is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 09:07 AM   #17
EviLGuY
So Fucking Banned
 
Join Date: Apr 2003
Location: malta
Posts: 12,745
Quote:
Originally posted by Stramm
that's a ja.va scr.ipt incl.ude on some of their sites
http://www3.smutserver.com/anal/badar/helpf.php (check source)

it opens an ifr.ame http://www3.smutserver.com/anal/badar/helpf.php (don't click unless you have a firewall) that tries to install a trojan

a sample page (!!! installs trojan) http://www22.smutserver.com/cumshots/lake/

view the source and you'll see the scri.pt gets hahahahahahahad in the smutserver top banner code
Ahhh I long for the days before everyone fucktard was trying to make a buck installing shit on my computer.
EviLGuY is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 05-10-2004, 09:17 AM   #18
SmutServer
Registered User
 
Join Date: Dec 2003
Posts: 23
on another server he i-framed something from a different domain petite-virginz.biz

Domain Name: PETITE-VIRGINS.BIZ
Domain ID: D6715842-BIZ
Sponsoring Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM)
Domain Status: clientTransferProhibited
Registrant ID: DI_343543
Registrant Name: Nick Fedorov
Registrant Organization: Online service
Registrant Address1: Belinskogo street 69-3
Registrant City: Nizhny Novgorod
Registrant State/Province: None USA resident
Registrant Postal Code: 603600
Registrant Country: Russian Federation
Registrant Country Code: RU
Registrant Phone Number: +7.88312391465
Registrant Email: [email protected]


oh man i DO HATE russian scumbags
SmutServer is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
smutserver installs trojans? smutserver installs trojans?
« Previous Thread | Next Thread »

Bookmarks



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.