My site is tainted

Discussion in 'Websites' started by akdiver, Sep 24, 2008.

  1. #1
    Hi Guys,

    Apparently my site is a danger to google users

    It is www (dot) waterwear (dot) com (dot) au

    I dont know how I can identify the bugs if there is indeed any. As far as I am concerned I dont think there is any. How do I find out if my site does indeed have harmful files?

    Thanks
     
    akdiver, Sep 24, 2008 IP
  2. vansterdam

    vansterdam Notable Member

    Messages:
    3,145
    Likes Received:
    120
    Best Answers:
    0
    Trophy Points:
    245
    #2
    Yep your site has some kind of virus. AVG gives me this warning:
    Virus identified HTML/Framer.AR
    Detected on open.

    Go through your code and take out any scripts that you do not recognize. The threat may even be disguised as a script you do use such as Google Analytics.

    Perhaps your site even got infected through infected files on your pc.

    So try a virus scan of your own computer too.

    More likely someone hacked your site and put in some virus code.
     
    vansterdam, Sep 24, 2008 IP
  3. UseShots

    UseShots Peon

    Messages:
    244
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    0
    #3
    @akdiver: Check the script starting with eval(unescape("%77%69%6e%... It's at the bottom of the HTML code. When it is executed it adds a hidden iframe that silently loads malware from traffurl .ru

    In addition to scanning your own computer for viruses and spyware, you should make sure that your site software properly sanitizes user input and URL parameter to prevent SQL injections.

    Also check your server for suspicious files and directories that you didn't put there.

    After all, change all passwords from some secure computer and try to use SFTP instead of FTP when possible.
     
    UseShots, Sep 25, 2008 IP
  4. zelgly2

    zelgly2 Well-Known Member

    Messages:
    1,119
    Likes Received:
    28
    Best Answers:
    0
    Trophy Points:
    185
    #4
    I think hacker hacked your website and keep the virus. So check your site properly
     
    zelgly2, Sep 25, 2008 IP
  5. mrsexgod

    mrsexgod Peon

    Messages:
    55
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Seems to be a virus there!
     
    mrsexgod, Sep 25, 2008 IP
  6. .Jay

    .Jay Banned

    Messages:
    33
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    There are problems with it, which is shame!

    it has virus on :(
     
    .Jay, Sep 25, 2008 IP
  7. akdiver

    akdiver Well-Known Member

    Messages:
    1,219
    Likes Received:
    136
    Best Answers:
    0
    Trophy Points:
    185
    #7
    Why do people do crap like this? If I knew who it was I know what I would do to them :)

    Thanks guys. I will implement some of the strategies.
     
    akdiver, Sep 26, 2008 IP
  8. UseShots

    UseShots Peon

    Messages:
    244
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Mainly to make money.
    They install trojans to make user computers a part of their criminal botnet. Each infected computer earns them a few more bucks. That's why they try to break into every site they can and turn them into money making cows.
     
    UseShots, Sep 26, 2008 IP
  9. LBpatGHI

    LBpatGHI Peon

    Messages:
    54
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Definately a virus. Some other person on this site told me to check their site and I did not have proper virus protection. My entire computer crashed and I had to reformat everything. Lost all I had worked on except what was saved to my external hard drive
     
    LBpatGHI, Sep 26, 2008 IP