THIS IS A STATIC MIRROR OF USERSCRIPTS.ORG - LOGINS DO NOT WORK

Spam and malware

in Userscripts.org discussion
Subscribe to Spam and malware 3530 posts, 606 voices



Ashley Connor User
ChromeMacintosh

Somebody double check this for me?

https://userscripts-mirror.org/scripts/show/132822

It appears to be rewriting Amazon results in google to include a affiliate ID.

 
Vivre Scriptwright
FirefoxX11

@Couchy
Yes - evading by leaving the script near to empty - he already found that out half a day ago.

I too think the first upload-date is a good marker to dis/allow approval for the front page but it may not be that easy to include a completely new rule into the given setup.

Maybe it's easier to assign a 3rd categorie along with listed and unlisted - e.g. 'probation' - and exclude it from approving like unlisted, but allow listing + installation?

Even so - the intial date would have to be retrieved on every upload and update occurence. Realizing that also 'old' scripts can become unlisted (which is reasonable) implies that a date-check is nonexistent (superfluid) as only the current status quo counts.

And pondering about all this is only brain-stretching when you have no idea about the database structure nor the routines or the hierarchies ...

ok - late enough - here's my latest result-synopsis ;-)

--------------

current exe-contributor:
Poster: dispotszu - /467684
Script: Facebook PWD Stealer - /133595

according pusher:
.zakovnica - /467685
tarzunai - /467686
zajebansa - /467688
wujkinca - /467689

 
Bjorn Stromberg Scriptwright
ChromeWindows

Review Spam - https://userscripts-mirror.org/users/467722
https://userscripts-mirror.org/reviews/32377

 
Jefferson Scher Scriptwright
FirefoxWindows

Ashley Connor wrote:
Somebody double check this for me?
https://userscripts-mirror.org/scripts/show/132822
It appears to be rewriting Amazon results in google to include a affiliate ID.
Anything with this much obfuscation looks suspicious to me... I'm not so good at parsing, but it appears to retrieve and eval() this script:

http://www.jakesserver.co.uk/ExtensionFiles/PirateBay/v1.0/PirateBay.js

 
Vivre Scriptwright
FirefoxX11

spam-accounts:

derekmclaugh922 - /461037
Mark Nelson - /467810
thomaswilliam222 - /467798
jalandharflorist - /467807
Malaysia Holidaytours - /467784

spam as guide: /guides/534

--------

some Empty Topics - gone

 
Vivre Scriptwright
FirefoxX11

the master himself doesn't want uso to be visited anymore ;-)

------

forced redirects: (mostly away from uso)

Adminstrator - /441930
- Facebook xXx Stealer Elite v12 100% 4/16/2012 - /131032
- Hack Twitter Accounts *WORKS AS OF 4 / 12 / 2012 * - /130711

csxowghd - https://userscripts-mirror.org/users/441934
- Sharecash Auto Downloader + DOWNLOADER [downloadlink in description] - https://userscripts-mirror.org/scripts/show/129079
- Online Poker Bot 2012 Works on Pokerstars & more - https://userscripts-mirror.org/scripts/show/132114
? - Maplestory 2012 botty Undetected - https://userscripts-mirror.org/scripts/show/130293

billmurrey - https://userscripts-mirror.org/users/440556
- Make Money Online Fast and Easy! - https://userscripts-mirror.org/scripts/show/131996
- broken title to slavehackers.com - https://userscripts-mirror.org/scripts/show/131103

john anderson the 3rd - https://userscripts-mirror.org/users/441883
- ShareCash+FileIce survey bypass 4/16/2012 - https://userscripts-mirror.org/scripts/show/131030

** not sure about this, but looks dubious and he's part of this whole circle **
xaviaer342 - https://userscripts-mirror.org/users/441933
- FaceBook Elite Pro XXX - https://userscripts-mirror.org/scripts/show/129286


review pusher

.GregMan256 - https://userscripts-mirror.org/users/441742
bosalcky - https://userscripts-mirror.org/users/440555

 
Vivre Scriptwright
FirefoxX11

current exe-contributor: ~ (17/18.05) ~

Poster: retreiica - /467864
Script: Facebook PWD Stealer - /133642
2nd Script: Facebook Hack v4.0 - /133670 (unlisted)
3rd: Facebook Pwd Stealing Software v4.0 - /133671

his pusher:

.fazlic - /467870
1st Script: Facebook PWD Stealer - /133717
ujonjikr - /467869
1st Script: Facebook Password Stealer - /133697
beasppoinr - /467867
junjetina - /467866
kiieruz - /467865
pombas - /467875

------------

oh - sth. changed - this (1st + 3rd) fresh script didn't approve anymore :-)

besides: the 'fake script' is now (from 2nd) placed on the about page - ?_? rubbish idea

---------
:lol: - I just thought I had an apparition of that hard-core-spamming, looking at 'user online' - but then realizing it's my dear shizo-friend flooding in&out - ymmd - ;-)

 
Ashley Connor User
ChromeMacintosh

@Jefferson Scher

Yes the 2 obfuscated URLs in that script point to that script on http://www.jakesserver.co.uk/ExtensionFiles/PirateBay/v1.0/PirateBay.js which contains more obfuscated URLs, notably amazon. which should have nothing to do with a script that redirects to a PirateBay mirror.

I've flagged it as spam.

 
nice_bow_tie Scriptwright
FirefoxX11

https://userscripts-mirror.org/scripts/review/130919

This is another suspiciously obfuscated script by the same user.

 
Vivre Scriptwright
FirefoxX11

@Jake ~ please don't let the unwanted false-'unlisted' scripts be flawed too long: page=103#posts-442560

... and it still continues/increases ...

Scripters are trying to reach the support but the mail delivery is denied. why? [...address-typo]

 
Vivre Scriptwright
FirefoxX11

spam-accounts:

jess gulp - /467881
RaipurFlorist - /468015
--------
Empty Topics - gone

 
Vivre Scriptwright
FirefoxX11


@Jake ~ ¸.•*•● thanks ○•*•.¸

 
eugenox Scriptwright
FirefoxX11

bvjf89safka posted this spam /reviews/32621

 
Jefferson Scher Scriptwright
FirefoxWindows

bvfhsuifsa89 posted this spam.

 
MickM User
FirefoxMacintosh

spam review:
https://userscripts-mirror.org/reviews/32643

 
Roxz Scriptwright
FirefoxWindows

https://userscripts-mirror.org/users/468801

Spam account. Can you ban ip? Is the same guy as before.

BTW have you noticed? Someone did mark the admin's post as spam. I bet he sure will delete himself for not spaming.

 
Vess Scriptwright
FirefoxWindows

http://www.netetrader.com posted this spam.

 
Roxz Scriptwright
FirefoxWindows

This guy is very persistent

https://userscripts-mirror.org/users/468939

 
Mindeye Scriptwright
FirefoxWindows

cxujfisa89 posted this spam.

 
sebaro Scriptwright
OperaX11

https://userscripts-mirror.org/users/468336
How about a 'Flag Spammer' button in the user's profile?

 
Bazaku Scriptwright
ChromeWindows

https://userscripts-mirror.org/users/468773 sent me a message with the following, and I'm most certain that it's spam:
hello
It my pleasure to contact you after veiwing your profile today at userscripts-mirror.org i love it and also became interested in knowing more about you,Plz i will like you to contact me through my email ([email protected])so that i will give you my pictures for you to know me well
jane

 
HanFox Scriptwright
FirefoxWindows

Spammer:
https://userscripts-mirror.org/users/469102

 
Jefferson Scher Scriptwright
FirefoxWindows

vhfks78 posted this spam.

 
Dick Holman User
FirefoxX11

https://userscripts-mirror.org/users/469371
Sodding forum spammers! I curse and vilify them! Frequently... :(

 
nice_bow_tie Scriptwright
FirefoxX11

Spammer:
https://userscripts-mirror.org/users/469835