1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Is my website Hacked?

Discussion in 'Security' started by Napoleon, Jan 28, 2008.

  1. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #21
    I deleted a few files and its not appearing on my computer now. Can somebody confirm?
     
    Napoleon, Jan 29, 2008 IP
  2. wisdomtool

    wisdomtool Moderator Staff

    Messages:
    15,825
    Likes Received:
    1,367
    Best Answers:
    1
    Trophy Points:
    455
    #22
    Confirmed, looks fine here! Congrats!
     
    wisdomtool, Jan 29, 2008 IP
    Napoleon likes this.
  3. SamuraiZero

    SamuraiZero Peon

    Messages:
    596
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    0
    #23
    Edit: I didnt read through the entire thread. Apologies
     
    SamuraiZero, Jan 29, 2008 IP
    wisdomtool likes this.
  4. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #24
    Thanks wisdomtool. It must be the xml file then.
     
    Napoleon, Jan 29, 2008 IP
  5. wisdomtool

    wisdomtool Moderator Staff

    Messages:
    15,825
    Likes Received:
    1,367
    Best Answers:
    1
    Trophy Points:
    455
    #25
    How they get in is a problem, maybe SamuraiZero can help us find out more? Maybe on your end try to install chkrootkit or rkhunter to see if there are any vulnerabilities.


     
    wisdomtool, Jan 29, 2008 IP
  6. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #26
    Just checked the cpanel backups on my old host and the xml file is there too. That host was hacked once, so if the problem is with the xml file, it might be the reason.:)
     
    Napoleon, Jan 29, 2008 IP
  7. wisdomtool

    wisdomtool Moderator Staff

    Messages:
    15,825
    Likes Received:
    1,367
    Best Answers:
    1
    Trophy Points:
    455
    #27
    Check carefully and monitor carefully, once they tried and succeed they normally will attack again.

     
    wisdomtool, Jan 29, 2008 IP
  8. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #28
    I sure will wisdomtool. Can somebody confirm that there is no problem with the remaining pages too. It is fine for me.
     
    Napoleon, Jan 29, 2008 IP
  9. Binarywebs

    Binarywebs Peon

    Messages:
    95
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #29
    Looks ok from this end / IE6 & FF.
     
    Binarywebs, Jan 29, 2008 IP
    Napoleon likes this.
  10. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #30
    Thanks for your help Binary Webs. I can sleep well now.
     
    Napoleon, Jan 29, 2008 IP
  11. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #31
    It is back again guys:( I don't know what to do.
     
    Napoleon, Jan 29, 2008 IP
  12. Dondon2d

    Dondon2d Peon

    Messages:
    3,193
    Likes Received:
    146
    Best Answers:
    0
    Trophy Points:
    0
    #32
    It only appears in Internet Explorer 7, as far as I know.
     
    Dondon2d, Jan 29, 2008 IP
  13. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #33
    Well, the a few other sites on the same server have the same problem too, so I guess I wasted too much time on finding the flaws in my code.
     
    Napoleon, Jan 29, 2008 IP
  14. HurryHost.com

    HurryHost.com Banned

    Messages:
    125
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #34
    You have been iFramed by the looks of things, you website has been targeted to exploit peoples browsers to potentially put the people on a botnet.

    if you need security against such things, send me a PM.
     
    HurryHost.com, Jan 29, 2008 IP
  15. Dondon2d

    Dondon2d Peon

    Messages:
    3,193
    Likes Received:
    146
    Best Answers:
    0
    Trophy Points:
    0
    #35
    So the problem must be with your host, not with your site.
     
    Dondon2d, Jan 29, 2008 IP
  16. wisdomtool

    wisdomtool Moderator Staff

    Messages:
    15,825
    Likes Received:
    1,367
    Best Answers:
    1
    Trophy Points:
    455
    #36
    Complain to your host and have it fixed if you are not having a dedicated server nothing much you can do.
     
    wisdomtool, Jan 29, 2008 IP
  17. Napoleon

    Napoleon Peon

    Messages:
    732
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    0
    #37
    Google search on the subject says that it is a problem with the linux kernel that allows tha hacker to inject code into random files. I opened a support ticket with my host and they are working on it.
     
    Napoleon, Jan 29, 2008 IP
  18. Dondon2d

    Dondon2d Peon

    Messages:
    3,193
    Likes Received:
    146
    Best Answers:
    0
    Trophy Points:
    0
    #38
    Ok, keep us updated Napoleon.

    Off-topic: Are you the same Napoleon from HB? :)
     
    Dondon2d, Jan 30, 2008 IP
  19. wisdomtool

    wisdomtool Moderator Staff

    Messages:
    15,825
    Likes Received:
    1,367
    Best Answers:
    1
    Trophy Points:
    455
    #39
    Complain a bit more to the host, ask for a month or two free for compensation :)


     
    wisdomtool, Jan 30, 2008 IP
  20. digitalmatch

    digitalmatch Peon

    Messages:
    444
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #40
    The same in FireFox.
     
    digitalmatch, Jan 30, 2008 IP