Joined
·
1,282 Posts
Actually guys he's right...
I went to the the web page and got this:
So I downloaded it and this is what the file was:
I scanned it with nod32, but it didn't come up as a virus:
The files comes from asikral.com, apparently from /clientscript:
Indeed it does, this is what you get when you vist the page for first time:
And when you visit it again, you get this:
I had to use a few proxys to use different ip's and find this..
I also attached the source code of the page before you visit, when it gives you access to the file, and the source after you visit, when it blocks your ip. It's just a big script, dunno what it's supposed to do.
I think I remember reading that Windows had a vulnerability with these files, this might have something to do.
I went to the the web page and got this:
So I downloaded it and this is what the file was:
I scanned it with nod32, but it didn't come up as a virus:
The files comes from asikral.com, apparently from /clientscript:
Indeed it does, this is what you get when you vist the page for first time:
And when you visit it again, you get this:
I had to use a few proxys to use different ip's and find this..
I also attached the source code of the page before you visit, when it gives you access to the file, and the source after you visit, when it blocks your ip. It's just a big script, dunno what it's supposed to do.
I think I remember reading that Windows had a vulnerability with these files, this might have something to do.