WIW - View topic - basedvd.com running in 3rd party banners

It is currently Thu Sep 09, 2010 5:14 pm

basedvd.com running in 3rd party banners

Page 2 of 2

[ 12 posts ]

Go to page Previous 1, 2

Print view

Previous topic | Next topic

basedvd.com running in 3rd party banners

Author

Message

wagdoll2

Newbie

Joined: Sat Mar 06, 2010 11:54 pm
Posts: 3

Re: basedvd.com running in 3rd party banners

I'm getting a lot of autosearches and some framebreakers for chinaontv.

I think that basedvd may have a new name and be the source of these
problems. I just can't find what the name is.

Mon Mar 08, 2010 3:00 pm

wagdoll2

Newbie

Joined: Sat Mar 06, 2010 11:54 pm
Posts: 3

Re: basedvd.com running in 3rd party banners

Found it.

creadunet.com/promote2.php?user=admin

coming via adnetmart.

It has a lot of stuff in it, but I can't see how to copy the codes from firebug in this version on FF 6.x?


	Code: <script src="http://www.adnetmart.com/show.php?z=1&pl=445&j=1&code=1268059015288" type="text/javascript"></script>

That loads:


	Code: <iframe width="468" scrolling="no" height="61" frameborder="0" src="http://wonderfuldays.creadunet.com/promote2.php?user=admin" border="0" marginheight="0" marginwidth="0"></iframe>

This is a selection of what that loads:


	Code: <script src="http://www.avenir-affiliation.fr/slidein.php?pseudo=lordfinalff&idsite=3437" type="text/javascript"></script> <script src="http://js.128b.com/packpopup.php?idsite=43397&data=3437&random=1268059016326" language="JavaScript"></script> <script src="http://astatic.weborama.fr/js/adperf_network.js" type="text/javascript"></script> <iframe width="0" height="0" src="http://www.avenir-affiliation.fr/scriptad.html"></iframe> <script src="http://www.avenir-affiliation.fr/slidein.php?pseudo=lordfinalff&idsite=3125" type="text/javascript"></script> <iframe width="0" height="0" src="http://www.avenir-affiliation.fr/scriptad.html"></iframe> <iframe width="468" scrolling="no" height="60" frameborder="0" marginheight="0" marginwidth="0" src="/mods/zonepub.php?emp=26&nbp=1&ref=6" name="ZonePub_Zone_promote2_468_60"></iframe> <iframe width="0" scrolling="no" height="0" frameborder="0" allowtransparency="true" vspace="0" hspace="0" marginheight="0" marginwidth="0" src="http://www.cpmadworld.com/histats.html"></iframe> <iframe width="0" scrolling="no" height="0" frameborder="0" allowtransparency="true" vspace="0" hspace="0" marginheight="0" marginwidth="0" src="http://www.cpmadworld.com/promote.php?id=lordfinalff&type=ptp"></iframe> <iframe width="500" scrolling="no" height="500" frameborder="0" marginheight="0" marginwidth="0" src="/mods/zonepub.php?emp=34&nbp=1&ref=6" name="ZonePub_Zone_promote2_compteur"></iframe>

A few of those pages in the iframes load the creadunet iframe again so there's at least a triple load of the payload of that.

I've gone into the cpmadworld and found all of these autosearches (posted as URLs for brevity but these are actually loading inside 0 iframes):


	Code: thebighits.com/?id=cpmadworld thebighits.com/?id=cpmadworld ourbesthits.com/index.php?id=cpmadworld netsearch.cc/go.php?u=cpmadworld porn-video-dump.com/toplist2.html besthitsnow.com/index.php?id=cpmadworld motionhits.com/index.php?id=cpmadworld motionhits.com/index.php?id=cpmadworld thehitsusa.com/index.php?id=cpmadworld

However, that is just a small amount of what is hidden in there. I found far more than that inside adblock, so this is just example codes and not the full load. Somewhere along the track I believe this is the source of the chinaontv framebreakers.

Mon Mar 08, 2010 3:59 pm

Page 2 of 2

[ 12 posts ]

Go to page Previous 1, 2

Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Jump to:

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Installed by Installatron.
Forum theme by Vjacheslav Trushkin for Free Forum/DivisionCore.