Reported Attack Page

Discussion in 'Security' started by DanielRosca, Jun 14, 2010.

  1. #1
    Hello,

    I'm getting the following security report when I try to access one of my friend's website.
    http://i48.tinypic.com/2w52jip.jpg

    May anybody help me to solve this problem?

    Thanks,
    Daniel Roșca
     
    DanielRosca, Jun 14, 2010 IP
  2. madaboutlinux

    madaboutlinux Member

    Messages:
    250
    Likes Received:
    7
    Best Answers:
    2
    Trophy Points:
    43
    #2
    This is the case of website file injections mostly where eval(base64_decode) are injected in the files via Ftp. Also check for some unknown files under the home directory of the friends account. You may find some malicious files that needs to be removed.
     
    madaboutlinux, Jun 15, 2010 IP
  3. kabalyero

    kabalyero Peon

    Messages:
    73
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    I used to get that in one of my blogs. The culprit was a widget that went rouge. So be careful with the widgets you install or place in your blogs or sites too.
     
    kabalyero, Jun 15, 2010 IP
  4. DanielRosca

    DanielRosca Active Member

    Messages:
    158
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    61
    #4
    Thanks for your answers. I will try them to see the results.
     
    DanielRosca, Jun 15, 2010 IP
  5. extremephp

    extremephp Peon

    Messages:
    1,290
    Likes Received:
    32
    Best Answers:
    0
    Trophy Points:
    0
    #5
    There are Self spreading Iframes which links to chura.pl and related sites which makes our site to be blocked.. Do make a check for that :)
     
    extremephp, Jun 15, 2010 IP
  6. DanielRosca

    DanielRosca Active Member

    Messages:
    158
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    61
    #6
    Thanks for your answer. I will try them.
    It's also hard for me to solve the problem, because is not my website and I do not have ftp access, it's my friend web and i'm explaining him the given solutions.

    Thanks for all your answers.
     
    DanielRosca, Jun 15, 2010 IP
  7. turnkeyforms

    turnkeyforms Member

    Messages:
    102
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    28
    #7
    My site mortgagehelpbox .com received this message. What do I have to do with this?
     
    turnkeyforms, Dec 2, 2010 IP
  8. blackvps

    blackvps Peon

    Messages:
    29
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Info: safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=nl&site=http://mortgagehelpbox.com/
    Contact your hosting provider, they'll help you.
    You site was probably showing infected ads or iframes which might have caused the report.
     
    blackvps, Dec 2, 2010 IP
  9. Chubby

    Chubby Peon

    Messages:
    3
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Most likely your friends website got hacked and the hacker and mass spammed with or it or an or the attacker used it to spread with exploit on your website making the visitors vulnerable.
     
    Chubby, Dec 4, 2010 IP