Quote from: AquariuZ on May 09, 2009, 07:44:52 PM
Stefan it seems the current version of SMF has an exploit which a Russian site is using

http://nnovclub.ru/ I believe...

Not destructive but disruptive

Recommend checking with simplemachines.org

This was posted in the Thane thread.
If you go to Google.com and type in Overunity the first link that is shown states Overunity.com but when you select that link it takes you to the Russian site (http://nnovclub.ru/ ) that has the P0RN that pops up in multiple windows.

Somehow in Google the Overunity site is now linked to the Russian Site that has P0RN. Is Stephan using the same IP provider
Does not seem to happen with other search engines (like Yahoo) but then they maybe behind in updating.

..this website has been a closet of surprises lately.  I go to take finals for college, and then come back and there's a pr0n popup and a christmass-tree theme.

I looked at the SMF 2.0 software, it does not recommend use for a production site. As I recall from earlier versions of SMF, this are a bit scary code-side; and from the looks of the source it generates, the styling of output is done with about a dozen different style sheets.

All this website needs is one good set of style sheets and a back-end hack to fit the advertising in and everything will be ok.

As it stands, there wasn't really any use in changing forum versions - I wonder how version 2 stacks up to version 1.8?

I never have fansied all of the junk that SMF comes with out of 'box'...there are better templating systems out there as well. 'smarty' is one of them.

Quote from: Tink on May 09, 2009, 08:32:25 PM
And the popup also plants a cookie.
Delete or block this cookie; "video-huk.ru"
I saw it because I use Firefox and Firefox must always ask me if I want a cookie or not.
Just want to let you all know.
Maybe the cookie doesn't do anything bad.

I had the same Russian teen hard core  when clicking through to the Tommey Reed thread. Technically, it wasn't a pop-up
but opened in a new browser.

There is something bad going on here which needs to be
dealt with.

Paul.

Hi,

Anybody else thet experience that a bad site pops up as soon as you enter overunity.com? It seems to happen every time I move the mouse over the logo flash section.

Vidar

Same thing here, new browser window opened at http://rus-teenagers.ru, added to Adblock and firewall to block the IP 91.202.63.108.

Front Page Information
Website Title:    Ð ÐµÐ°Ð»ÑŒÐ½Ð¾Ðµ эксклюзивное 18+ МолодÑ'жное супер порно оÑ,менного качесÑ,ва, Ñ,олько на эÑ,ом сайÑ,е
Title Relevancy    33%
Meta Description:    ÐŸÐ¾Ñ€Ð½Ð¾ виÑ,рина, порно, скачаÑ,ÑŒ порно, качесÑ,венное порно, порнуÑ...а,порево, минеÑ,, анал, групповуÑ...а
Relevancy:    44% relevant.
Meta Keywords:    Ð¿Ð¾Ñ€Ð½Ð¾ виÑ,рина, порно, скачаÑ,ÑŒ порно, качесÑ,венное порно, порнуÑ...а, порево, минеÑ,, анал, групповуÑ...а
Relevancy:    44% relevant
SEO Score:    73%
Terms:    343 (Unique: 236, Linked: 188)
Images:    206 (Alt tags missing: 40)
Links:    128   (Internal: 126, Outbound: 2)
AboutUs:    Wiki article on Rus-teenagers.ru
Indexed Data
Alexa Trend/Rank:    The lower the rank the better. #274,074: Down 41,081 ranks over the last three months.
Registry Data
Created:    2009-04-07
Expires:    2010-04-07
Whois Server:    whois.ripn.net
Server Data
Server Type:    nginx/0.6.35
IP Address:    91.202.63.108 Whois | Reverse-IP | Ping | DNS Lookup | Traceroute
IP Location    Virgin Islands, British - Virgin Islands, British - Akrino Inc
Response Code:    200
Domain Status:    Registered And Active Website
DomainTools Exclusive
Registrant Search:    "Private person" owns about 178,060 other domains
Whois History:    2 records have been archived since 2009-05-05.
Reverse IP:    7 other sites hosted on this server.
Free Tool:    Download DomainTools Download DomainTools for Windows
Whois Record

domain:     RUS-TEENAGERS.RU
type:       CORPORATE
nserver:    ns1.reg.ru.
nserver:    ns2.reg.ru.
state:      REGISTERED, DELEGATED
person:     Private person
phone:      +7 495 7829037
e-mail:     
registrar:  REGRU-REG-RIPN
created:    2009.04.07
paid-till:  2010.04.07
source:     TC-RIPN


Regards,
Paul