Hi forum friends,
See: http://urlquery.net/queued.php?id=12019
See: http://vscan.urlvoid.com/analysis/e02af25d5f07b035169cf378fe50d049/aW5kZXg=/
Found there:
-www.logotiger.biz/yxc/tr/js/jquery-1.3.2.min.js suspicious
[suspicious:2] (ipaddr:89.19.10.187) (script) -www.logotiger.biz/yxc/tr/js/jquery-1.3.2.min.js
status: (referer=-www.logotiger.biz/yxc/tr/index.asp)saved 57254 bytes 3dc9f7c2642efff4482e68c9d9df874bf98f5bcb
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [decodingLevel=0] found JavaScript
suspicious and avast detects as HTML:Iframe-inf
re: http://www.virustotal.com/file-scan/report.html?id=136a16442bad8323975df8b74bf0ca602b655ea04278ecd28d55e95d473288d0-1323905502
polonus