Author Topic:  (Read 5155 times)

0 Members and 1 Guest are viewing this topic.

May 22, 2009, 10:58:40 pm
Read 5155 times


  • Special Access
  • Newbie

  • Offline
  • *

  • 3
Another site with mebroot, see:

Came across this when searching for "advmaker_komap" (cookie-name) to understand what this is about.
They are discussing it on their forum, while the forum is still infected.

They got (newer) mebroot-version using Twitter to generate pseudo-random popup domain-names.