I have all of the js files open and saved to a text file, fwiw, from this morning.
On Mon, Jul 21, 2008 at 3:24 PM, Claude Schneegans < [EMAIL PROTECTED]> wrote: > >>For what it's worth, the specific URL that was injected in the sample I > saw > (http://1.verynx.cn/w.js) doesn't seem to work anymore. The server name > doesn't resolve. > > =============== > > Yeah, that suck, I was going to dissect it. > > It is broken now, but this morning I was able to see the code. > Apparently all it was doing was to document.write some code containing > an iFrame with an address to another Chinese site: > http://ll80.com/. > I've opened the site, but it is all Chinese for me ;-) > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309386 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
