Wierd, brand new proxy site iframed on some random site

**nux** · 17 April, 2009, 19:27 PM

This is weird, I just launched a brand new proxy on a brand new domain a couple hours ago, and saw a lot of referrals from
��. �� .

Edit: ^--- whoa ?

I see on their page this iframe for the first line on the page:
<iframe src='http://www.klassic.info' width='1' height='1' style='visibility:
hidden;'></iframe><html>

I don't know what to think about this...just weird

**Aquarezz** · 17 April, 2009, 20:14 PM

This is very weird indeed

What's the owners' goal by doing this? :s

**jacblac67** · 19 April, 2009, 01:33 AM

What language is that?

**Hellas** · 19 April, 2009, 07:38 AM

it is the probably new variant of the iframe virus

check it here
iFrame worms: goooogleadsence.biz, cutlot.cn, google-ana1yticz.com, mixante.cn and similar | Sulumits Retsambew

iframe worms: xtrarobotz.com, superbetfair.cn, lotmachinesguide.cn | Sulumits Retsambew

and probably your pc is now infected since it looks that this new variant is not recognizable by the standard antivirus...

**nux** · 20 April, 2009, 15:52 PM

Well it's not my website, it's another website linking to mine, for some reason.

I'm 100% sure my PC isn't infected as I run Gentoo Linux. That is interesting though. I wonder how my brand new proxy site ended up on there

**weirdnessme** · 22 April, 2009, 04:07 AM

Originally Posted by nux

Well it's not my website, it's another website linking to mine, for some reason.

I'm 100% sure my PC isn't infected as I run Gentoo Linux. That is interesting though. I wonder how my brand new proxy site ended up on there

Hi,

I have actually faced the same problem , it is not just ur website try to check source of every website u open u will find it at top .

I think u are on a LAN on which someones computer is infected with iframe virus ( That is what happened to me ) you can do nothing else but contact ur ISP to figure out the issue

**nux** · 22 April, 2009, 15:20 PM

It's just me and myself on my local network here. And they way I noticed it was I saw a bunch of referrals hitting my site from that fishwhatever.ru site.

The .ru site is the only site that has it.

**weirdnessme** · 22 April, 2009, 15:53 PM

Download Kaspersky Internet Securiyt & Scan Ur Comp & It Has Great Firewall That Detects Intrusion Attacks .

Post ur Hijack log if possible

**nux** · 22 April, 2009, 20:28 PM

I run Gentoo Linux. I appreciate you trying, but this issue did not originate from me. It's another page with an iframe (not my page) linking to one of my proxies.