puremis.net is infected:

Post Reply
YoKenny
Posts: 1179
Joined: Wed Aug 13, 2008 4:52 pm

puremis.net is infected:

Post by YoKenny » Sat May 16, 2009 1:28 pm

puremis.net is infected:
Sign of "JS:Redirector-H7 [Trj]" has been found in "hxxp://puremis.net/" file.

cconniejean
Posts: 696
Joined: Sun Jul 13, 2008 12:16 pm

I get

Post by cconniejean » Sat May 16, 2009 7:40 pm

Decoding just enough to get the domain the inline script is pointing to, I get a martuz[.]cn. Similar to the gumblar script attack going around.

Post Reply

Who is online

Users browsing this forum: No registered users and 13 guests