Get Paid Forum - Get Paid Discussion

Get Paid Forum - Get Paid Discussion > Get Paid To Programs > General Discussion : Free GPT sites and related topics

mitgib

Jul 14 2006, 08:11 PM

Been seeing a rash of this page over the few days as a redemptions, watch for it

ragnarok.trust29.com/

Now added to banned list at my sites

QUOTE(IframeChecker)

[b]Zeroiframes detected: 7[/B]
([i]Level: 0) Url checked:[/I]
http://ragnarok.trust29.com/
Zeroiframes detected on this site: [b]0[/B]
[b]Bidvertiser detected[/B] (TextAds, not a cheater)
[b]AdBrite detected[/B] (TextAds, not a cheater)
[b]NEOFFIC code detected![/B] (iframe cheater)

([i]Level: 1) Url checked:[/I] [i](iframe source)[/I]
http://neoffic.com/t/?id=ropayment
Zeroiframes detected on this site: [b]2[/B]
No ad codes identified

([i]Level: 2) Url checked:[/I] [i](iframe source)[/I]
http://sun101.us/
Zeroiframes detected on this site: [b]0[/B]
[b]FREE20 code detected![/B] (iframe cheater)

([i]Level: 3) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/new3.php
Zeroiframes detected on this site: [b]5[/B]
No ad codes identified

([i]Level: 4) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/xpl.wmf
Blank page / could not connect

([i]Level: 4) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/fil)); document.write(unescape(_mem.htm://http://count4all.net/adv/119/fil));...escape(_mem.htm
Blank page / could not connect

([i]Level: 4) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/fil_mem.)); document.write(unescape(htm://http://count4all.net/adv/119/fil_me...te(unescape(htm
Blank page / could not connect

([i]Level: 4) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/fil_mem.htm
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 4) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/fil_mem.htm
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 4) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/fil_mem.htm
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 4) Url checked:[/I] [i](iframe source)[/I]
http://count4all.net/adv/119/fil_mem.htm
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 3) Url checked:[/I] [i](iframe source)[/I]
http://www.free20.com/portal/index.php?aff=steven
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 3) Url checked:[/I] [i](script source)[/I]
http://prompt.zangocash.com/sp/824298c2/854291c7b4/lc.js
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 2) Url checked:[/I] [i](iframe source)[/I]
[url="http://neoffic.com/t/java script:location=/t/?c=qb3kbmdk8a5x5t6eg6evtp2dxq5wcw&r=+parent.location.href.replace%28/%5C?/g,101%29.replace%28/%5C&/g,102%29.replace%28/%5C=/g,103%29;"]http://neoffic.com/t/java script:location=/t/?c=qb3kbmdk8a5x5t6eg6evtp2dxq5wcw&r=+parent.location.href.replace(/\?/g,101).replace(/\&/g,102).replace(/\=/g,103);[/url]
Blank page / could not connect

([i]Level: 2) Url checked:[/I] [i](iframe source)[/I]
http://milppc.com
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 1) Url checked:[/I] [i](script source)[/I]
http://ragnarok.trust29.com/includes/tiny_mce/tiny_mce.js
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 2) Url checked:[/I] [i](script source)[/I]
http://ragnarok.trust29.com/includes/tiny_...s[language]+.js
Blank page / could not connect

([i]Level: 2) Url checked:[/I] [i](script source)[/I]
http://ragnarok.trust29.com/includes/tiny_...langs/+lang+.js
Blank page / could not connect

([i]Level: 1) Url checked:[/I] [i](script source)[/I]
http://bdv.bidvertiser.com/bidvertiser.dbm...2&bid=75459
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 1) Url checked:[/I] [i](script source)[/I]
http://4.adbrite.com/mb/text_group.php?sid...f355f315f776562
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

([i]Level: 1) Url checked:[/I] [i](script source)[/I]
http://hits.nextstat.com/cgi-bin/wsv2.cgi?102357
Zeroiframes detected on this site: [b]0[/B]
No ad codes identified

monoloop

Jul 15 2006, 12:38 AM

bad thing

2kids2pets

Jul 15 2006, 05:17 AM

The ht tp://sun101 .us/ page tries to load at least one virus too. It's been appearing in most pages that contain neoffic.

wagdoll

Jul 15 2006, 06:48 AM

The virus/trojans are in those count4allnet urls (which is coming from the sun101 site which is inside neoffic)

You can see one of them has wmf in the name, this is the wmf exploit trojan.

I think the fill mem urls are what is causing the dumprep process which locks up your pc for about 10 mins and is very hard to close the window in the task manager.

Other than neoffic (which seems to have been removed) I don't see anything direct on that page though?

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.