SecurityFocus

what is this? Jan 13 2008 04:01PM
crazy frog crazy frog (i m crazy frog gmail com) (5 replies)

Re: what is this? Jan 16 2008 08:57AM
Yousef Syed (yousef syed gmail com)

Re: what is this? Jan 15 2008 05:16AM
Denis (sp23 internode on net) (3 replies)

RE: what is this? Jan 15 2008 04:33PM
Memisyazici, Aras (arasm vt edu) (1 replies)

Re[2]: what is this? Jan 15 2008 04:41PM
Denis (sp23 internode on net)

Re: what is this? Jan 15 2008 04:28PM
Jamie Riden (jamie riden gmail com)

Re: what is this? Jan 15 2008 06:12AM
crazy frog crazy frog (i m crazy frog gmail com) (2 replies)

Re[2]: what is this? Jan 15 2008 05:26PM
none (updates digitalis com au)

Re: [Full-disclosure] what is this? Jan 15 2008 06:45AM
Nick FitzGerald (nick virus-l demon co uk) (1 replies)

Re: [Full-disclosure] what is this? Jan 15 2008 08:26AM
crazy frog crazy frog (i m crazy frog gmail com) (1 replies)

Re: [Full-disclosure] what is this? Jan 15 2008 05:22PM
Gadi Evron (ge linuxbox org) (1 replies)

Re: [Full-disclosure] what is this? Jan 15 2008 05:24PM
crazy frog crazy frog (i m crazy frog gmail com)

Re: what is this? Jan 14 2008 09:46PM
Gadi Evron (ge linuxbox org)

Re: what is this? Jan 14 2008 03:44PM
Jose Nazario (jose monkey org) (3 replies)

Re[2]: [Full-disclosure] what is this? Jan 14 2008 09:39PM
3APA3A (3APA3A SECURITY NNOV RU)

RE: what is this? Jan 14 2008 07:09PM
Mario Contestabile (marioc computer org)

Re: what is this? Jan 14 2008 03:56PM
crazy frog crazy frog (i m crazy frog gmail com)

Re: [Full-disclosure] what is this? Jan 14 2008 09:34AM
3APA3A (3APA3A SECURITY NNOV RU) (1 replies)

Dear crazy frog crazy frog,

Clear your computer from trojan, change FTP password for you site
hosting access, because it's stolen, access your hosting account via
FTP and remove additional text (usually at the end of the file, after
</html>) from all HTML/PHP pages.

--Sunday, January 13, 2008, 7:01:34 PM, you wrote to full-disclosure (at) lists.grok.org (dot) uk [email concealed]:

cfcf> Hi,

cfcf> Recently on opening one of my site,my antivirus pops up saying that it
cfcf> has found on malicious script.the url is random and i have managed to
cfcf> get tht script.it is using some flaw in apple quick time.
cfcf> u can get the zip file for java script here:
cfcf> http://secgeeks.com/what.zip
cfcf> password is 12345
cfcf> can somebody guide/help me what is this and how can i remove it?

--
~/ZARAZA http://securityvulns.com/
Ñòðåëÿÿ âî âòîðîé ðàç, îí èñêàëå÷èë ïîñòîðîííåãî. Ïîñòîðîííèì áûë ÿ. (Òâåí)

[ reply ]

Re: [Full-disclosure] what is this? Jan 14 2008 11:52AM
Nick FitzGerald (nick virus-l demon co uk) (1 replies)

Re: [Full-disclosure] what is this? Jan 14 2008 01:56PM
crazy frog crazy frog (i m crazy frog gmail com)