P.O.C Posted April 19, 2014 Report Share Posted April 19, 2014 Un coleg de munca tot imi zicea ca o fata tot il eticheteaza ca sa ii vada videoclipurile porno, asa ca m-am uitat la el in timeline si am gasit acest link YouTubePentru mai multe informatii: Un nou VIRUS se r?spânde?te agresiv pe FACEBOOK. Sute de persoane p?c?lite s? acceseze un link | REALITATEA .NET Quote Link to comment Share on other sites More sharing options...
Googutul Posted April 19, 2014 Report Share Posted April 19, 2014 (edited) Un coleg de munca tot imi zicea ca o fata tot il eticheteaza ca sa ii vada videoclipurile porno, asa ca m-am uitat la el in timeline si am gasit acest link YouTubePentru mai multe informatii: Un nou VIRUS se r?spânde?te agresiv pe FACEBOOK. Sute de persoane p?c?lite s? acceseze un link | REALITATEA .NETOmu' nu e prost. A cryptat in php linku de download, asa ca daca i-am fi spart site-u de unde se downloada automat programu, daca accesai linku de "Youtube" nu mai avea nicio problema.. E facut pe gazduire gratuita, si i-a expirat o pagina.. e vai de capul lui..asta e in pagina principala: city == "Torrance") { header('Location: http://facebook.com/'); } else if($city->city == "Menlo Park") { header('Location: http://facebook.com/'); } else if($city->city == "Palo Alto") { header('Location: http://facebook.com/'); } else if($city->city == "Montara") { header('Location: http://facebook.com/'); } else if($city->city == "Mountain View") { header('Location: http://facebook.com/'); } else if($city->city == "Ashburn") { header('Location: http://facebook.com/'); } //echo $ip; //echo $city->city; ?>As vrea acuma sa ma apus sa decryptez cacatu ala de link de ubnde se downloadeaza setup.exe, cand vrea omu' sa intre pe fb sa vada ce se mai intampla, numai linkuri cu oameni care se dezbraca vad, si aia fiind prietenii mei Edited April 19, 2014 by Googutul Quote Link to comment Share on other sites More sharing options...
bubu2005 Posted April 19, 2014 Report Share Posted April 19, 2014 Hostname ytvideoqs.esy.es ISP Hostinger International Limited (AS47583) Continent North America Flag US Country United States Country Code US (USA) Region Unknown Local time 19 Apr 2014 05:32 CDT Metropolis Unknown Postal Code Unknown City Unknown Latitude 38 IP Address 185.28.20.222 Longitude -97 Quote Link to comment Share on other sites More sharing options...
z4rk Posted April 19, 2014 Report Share Posted April 19, 2014 Pai si ce face mai exact acest virus? Quote Link to comment Share on other sites More sharing options...
Selebii Posted April 19, 2014 Report Share Posted April 19, 2014 Pai si ce face mai exact acest virus?Din cate am vazut eu, SPAM. E destul de enervant. Sunt destule persoane care au capul doar ca sa nu le ploua in gat si click-uiesc tot ce prind. Quote Link to comment Share on other sites More sharing options...
awnly3jhc2g Posted April 19, 2014 Report Share Posted April 19, 2014 Setup.exe https://www.virustotal.com/ro/file/36039ef55df7cbb3f4f6517f1c655a1be94056e2204edc57f14b237a1dcb42a2/analysis/L-am scanat pe VirusTotal ca sa il analizeze ei mai bine si poate devine si mai detectat astfel incat rata de infectare sa fie in scadere.Alte fisiere (virusi) de acelasi nene se afla aici : https://projektkosumi.googlecode.com/svn/trunk/Unul din domenii pe care mai activeaza : vidsv ines .com (209.105.239.76 - remote desktop) Presupun ca tot aici tine si cateva loguri interesante. Quote Link to comment Share on other sites More sharing options...
