Author Topic: Some particular downloader  (Read 3183 times)

0 Members and 1 Guest are viewing this topic.

July 29, 2009, 05:44:34 pm
Read 3183 times


  • Jr. Member

  • Offline
  • **

  • 21
This is pretty well protected from simple gets.  The first one is injected in an obfuscated format to hacked websites then redirects to teh first 3 sites (all hosted on then the 3rd step does some checking on the referrer chain to before it dumps the javascript payload.   Then, if you do another request, the 3rd step directs you to either google search or search.  Pretty fun.