My website is infested with malware? please help

Discussion in 'Security' started by slymarketing, Mar 12, 2011.

0
  1. #1
    I have just received a message from one of my visitors that my website has been infested with malware. I have no idea how it happened.

    I am using a Mac, and I haven't seen anything about malware when using Firefox, Safari or Chrome. But when I asked the person who told me about it, what browser he used, he told me he was using Internet Explorer. So, I tested it on a PC with Internet Explorer, and now I also get the malware message.

    Do you have any idea what I should do?

    This is my website: http://slymarketing.com

    I really appreciate any help.

    - Jens
     
    slymarketing, Mar 12, 2011 IP
  2. giorgioarmani

    giorgioarmani Well-Known Member

    Messages:
    2,634
    Likes Received:
    40
    Best Answers:
    0
    Trophy Points:
    160
    #2
    Your "visitor" said that?

    Ask him for some proof...

    I see nothing "wrong" with your site...
     
    giorgioarmani, Mar 12, 2011 IP
  3. drewtoby

    drewtoby Well-Known Member

    Messages:
    763
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    108
    #3
    Is it a google warning?
     
    drewtoby, Mar 12, 2011 IP
  4. midwestbonsai

    midwestbonsai Well-Known Member

    Messages:
    402
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    105
    #4
    Is it a wordpress site?
     
    midwestbonsai, Mar 12, 2011 IP
  5. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #5
    I saw the warning myself, but after I saw it I have been removing a lot of old files that was no longer in use on my server. Hopefully this has helped. I didn't get the message when I tried Internet Explorer now.

    @ drewtoby
    It looks like it was an Internet Explorer warning. Because I didn't google it, I went directly to the site.

    @midwestbonsai
    Yes, it's a wordpress site.
     
    slymarketing, Mar 13, 2011 IP
  6. midwestbonsai

    midwestbonsai Well-Known Member

    Messages:
    402
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    105
    #6
    Since it is a wordpress site, there is something in database that is causing the issue. Restore your database backup asap.
     
    midwestbonsai, Mar 13, 2011 IP
  7. mikeasro

    mikeasro Peon

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #7
    mikeasro, Mar 16, 2011 IP
  8. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #8
    slymarketing, Mar 16, 2011 IP
  9. Mega B

    Mega B Well-Known Member

    Messages:
    3,454
    Likes Received:
    66
    Best Answers:
    1
    Trophy Points:
    190
    #9
    Just had a quick look using FF and IE and i have to say i cannot see any problems with the site.So i guess you must of sorted it out
     
    Mega B, Mar 16, 2011 IP
  10. mikeasro

    mikeasro Peon

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Do you own the server, is it dedicated?
     
    mikeasro, Mar 16, 2011 IP
  11. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #11
    No, it's at dreamhost and it's a shared server.

    I hope I have sorted it out, because I can't find any problems right now :)
     
    slymarketing, Mar 16, 2011 IP
  12. mikeasro

    mikeasro Peon

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #12
    Email DreamHost and ask them to Scan your web directory, asn ask them to have a quick look at your logs
     
    mikeasro, Mar 16, 2011 IP
  13. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #13
    Thanks. I will do that.
     
    slymarketing, Mar 16, 2011 IP
  14. hostiwant

    hostiwant Peon

    Messages:
    27
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #14
    you have been hacked and c99 is a shell used by hackers to control your website. Your safest bet is to change hosting account server.
     
    hostiwant, Apr 17, 2011 IP
  15. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #15
    I closed that particular account, since I didn't understand what to do and I was going to stop using the domain anyway. But, my only concern now is that the hackers might have control over the entire account?

    I have several domains hosted with the account at dreamhost, and I haven't seen any evidence of being hacked at my main blog yet (the one in my signature).

    Any suggestions?

    Thanks a lot for all your help.
     
    slymarketing, Apr 19, 2011 IP
  16. devonblzx

    devonblzx Peon

    Messages:
    27
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #16
    Make sure you don't have any 777 permission files. Especially nothing that contains sensitive information or database information.
     
    devonblzx, Apr 19, 2011 IP
  17. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #17
    I thought everything was ok, but now, when I'm using Internet Explorer I get an alert saying that it's still infested with malware.

    Please, I need some help with this.

    This is the website: http://slymarketing.com

    It seems that it's only happening with IE.

    - Jens
     
    slymarketing, Apr 26, 2011 IP