puremis.net is infected:

Post Reply
User avatar
YoKenny
Posts: 647
Joined: Wed Aug 13, 2008 4:52 pm

puremis.net is infected:

Post by YoKenny » Sat May 16, 2009 1:28 pm

puremis.net is infected:
Sign of "JS:Redirector-H7 [Trj]" has been found in "hxxp://puremis.net/" file.

User avatar
cconniejean
Posts: 366
Joined: Sun Jul 13, 2008 12:16 pm

I get

Post by cconniejean » Sat May 16, 2009 7:40 pm

Decoding just enough to get the domain the inline script is pointing to, I get a martuz[.]cn. Similar to the gumblar script attack going around.

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest