1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

My website is infested with malware? please help

Discussion in 'Security' started by slymarketing, Mar 12, 2011.

0
  1. #1
    I have just received a message from one of my visitors that my website has been infested with malware. I have no idea how it happened.

    I am using a Mac, and I haven't seen anything about malware when using Firefox, Safari or Chrome. But when I asked the person who told me about it, what browser he used, he told me he was using Internet Explorer. So, I tested it on a PC with Internet Explorer, and now I also get the malware message.

    Do you have any idea what I should do?

    This is my website: http://slymarketing.com

    I really appreciate any help.

    - Jens
     
    slymarketing, Mar 12, 2011 IP
  2. giorgioarmani

    giorgioarmani Well-Known Member

    Messages:
    2,633
    Likes Received:
    40
    Best Answers:
    0
    Trophy Points:
    160
    #2
    Your "visitor" said that?

    Ask him for some proof...

    I see nothing "wrong" with your site...
     
    giorgioarmani, Mar 12, 2011 IP
  3. drewtoby

    drewtoby Well-Known Member

    Messages:
    763
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    108
    #3
    Is it a google warning?
     
    drewtoby, Mar 12, 2011 IP
  4. midwestbonsai

    midwestbonsai Well-Known Member

    Messages:
    402
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    105
    #4
    Is it a wordpress site?
     
    midwestbonsai, Mar 12, 2011 IP
  5. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #5
    I saw the warning myself, but after I saw it I have been removing a lot of old files that was no longer in use on my server. Hopefully this has helped. I didn't get the message when I tried Internet Explorer now.

    @ drewtoby
    It looks like it was an Internet Explorer warning. Because I didn't google it, I went directly to the site.

    @midwestbonsai
    Yes, it's a wordpress site.
     
    slymarketing, Mar 13, 2011 IP
  6. midwestbonsai

    midwestbonsai Well-Known Member

    Messages:
    402
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    105
    #6
    Since it is a wordpress site, there is something in database that is causing the issue. Restore your database backup asap.
     
    midwestbonsai, Mar 13, 2011 IP
  7. mikeasro

    mikeasro Peon

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #7
    mikeasro, Mar 16, 2011 IP
  8. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #8
    slymarketing, Mar 16, 2011 IP
  9. Mega B

    Mega B Well-Known Member

    Messages:
    3,454
    Likes Received:
    66
    Best Answers:
    1
    Trophy Points:
    190
    #9
    Just had a quick look using FF and IE and i have to say i cannot see any problems with the site.So i guess you must of sorted it out
     
    Mega B, Mar 16, 2011 IP
  10. mikeasro

    mikeasro Peon

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Do you own the server, is it dedicated?
     
    mikeasro, Mar 16, 2011 IP
  11. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #11
    No, it's at dreamhost and it's a shared server.

    I hope I have sorted it out, because I can't find any problems right now :)
     
    slymarketing, Mar 16, 2011 IP
  12. mikeasro

    mikeasro Peon

    Messages:
    145
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #12
    Email DreamHost and ask them to Scan your web directory, asn ask them to have a quick look at your logs
     
    mikeasro, Mar 16, 2011 IP
  13. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #13
    Thanks. I will do that.
     
    slymarketing, Mar 16, 2011 IP
  14. hostiwant

    hostiwant Peon

    Messages:
    27
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #14
    you have been hacked and c99 is a shell used by hackers to control your website. Your safest bet is to change hosting account server.
     
    hostiwant, Apr 17, 2011 IP
  15. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #15
    I closed that particular account, since I didn't understand what to do and I was going to stop using the domain anyway. But, my only concern now is that the hackers might have control over the entire account?

    I have several domains hosted with the account at dreamhost, and I haven't seen any evidence of being hacked at my main blog yet (the one in my signature).

    Any suggestions?

    Thanks a lot for all your help.
     
    slymarketing, Apr 19, 2011 IP
  16. devonblzx

    devonblzx Peon

    Messages:
    27
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #16
    Make sure you don't have any 777 permission files. Especially nothing that contains sensitive information or database information.
     
    devonblzx, Apr 19, 2011 IP
  17. slymarketing

    slymarketing Active Member

    Messages:
    1,143
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    78
    #17
    I thought everything was ok, but now, when I'm using Internet Explorer I get an alert saying that it's still infested with malware.

    Please, I need some help with this.

    This is the website: http://slymarketing.com

    It seems that it's only happening with IE.

    - Jens
     
    slymarketing, Apr 26, 2011 IP