Voltron
Please Interrupt the link of this news-section:
October 3 to October 5: Computer DJ Summit in Tampa Bay, FL USA
This link contains a trojan:
THE URL OF TROJAN IS THIS (DON'T OPEN!!!!!): dnv-counter.com/trf/
DjKAD
October 3 to October 5: Computer DJ Summit in Tampa Bay, FL USA
This link contains a trojan:
THE URL OF TROJAN IS THIS (DON'T OPEN!!!!!): dnv-counter.com/trf/
DjKAD
发表时间 Mon 03 Jul 06 @ 1:55 pm
The link is http://www.computerdjsummit.com/ maybe you have a problem on YOUR side :)
发表时间 Mon 03 Jul 06 @ 2:05 pm
Voltron
i know the link, but the source code of trojan is on the link i've posted. there's a redirection. It use an exploit of some internet explorer versions. Maybe u have an updated version.
If you have time, look @ the html code of http://www.computerdjsummit.com/ you will notice (near the end of file) a javascript code with encoded link: try to save the html page on your local computer and change the line:
document.write(str);
in
alert(str);
Sorry if i wrong.
The trojan is called Downloader.Generic2.DVE and store a file called c:\23100247.exe in your root directory.
If you have time, look @ the html code of http://www.computerdjsummit.com/ you will notice (near the end of file) a javascript code with encoded link: try to save the html page on your local computer and change the line:
document.write(str);
in
alert(str);
Sorry if i wrong.
The trojan is called Downloader.Generic2.DVE and store a file called c:\23100247.exe in your root directory.
发表时间 Mon 03 Jul 06 @ 3:23 pm
Andrew87
I had something similar on a 15,000 member forum which I admin, somehow the javascript files were exploited to load a 1x1pixel iframe and load up a trojan, this looks even more suspicious with the encrypted javascript at the bottom.
发表时间 Tue 04 Jul 06 @ 12:03 am