IP Address Inspector

H.User3556 commented...

this starts from facebook. i received a message from a friend, turns out it's pre-generated. i talked with him and he said that he didn't send that msg, and as he checks in the sent part of his message inbox it sent to all of his friends automatically. he doesn't know how it happened.
the message has no subject, and the body is:

youtube
http://bit.ly/dbSmgq

when i go there it just loads as long as usual so i got scared and stopped it.

as it loads i noticed it goes to the following sites:

http://84.108.78.215/d=www.piratedb.net/0x3E8/view/console=yes/?go#

well it loads nothing, it just keeps loading and loading.
BUT when i tried replacing "no" instead of "yes" on the address, it goes to this page with a title "Yuo Tube etxetera i forgot" (and YES it is spelled YUO tube so it makes it uber suspicious)

and as it loads it has the same format as facebook video page, where there is a video rectangle in the center, and then comments underneath which is not true because the links of the usernames all have the same link, which is with piratedb dot something...
it's this:
Video Responses: 10 Text Comments: 70


babachat (4 hours ago)
Funniest thing EVER!!

csmith1199 (6 hours ago)
WooHoo!! Love this vid!!! Congrats on the front page!!!! :-)

sinmike1 (7 hours ago)
that.... was .......GREAT !!!

ah17 (10 hours ago)
Nice vid :)

and each "username" has this link:
http://84.108.78.215/d=www.piratedb.net/0x3E8/view/console=no/?go# (i guess it shows "no" because of when i changed the "yes" to "no" i guess...)

but i took note of the virus that my virus detector said, it's:
(this is a line from the program itself: "contains recognition pattern of HTML/FraudL,b,16546 HTML script virus"
AND
"C:\ ....... is the TR/Dropper.Gen Trojan and there is this
"opening setup.exe" that pops up like that when you download a file.. but i didn't download any.

i hope this gets resolved....
January 27 2010 02:28 AM