Site Hacked Need Help - Malware on Site

Discussion in 'Security' started by RapidFire, Jan 8, 2009.

  1. #1
    My traffic fell by quite a bit and users are complaining about some sort of malware on the site. It seems to only be affecting IE but I need an expert to help me.
     
    RapidFire, Jan 8, 2009 IP
  2. zebulon

    zebulon Well-Known Member

    Messages:
    198
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    130
    #2
    1) Whats the site?
    2) Have you installed / uploaded any 3rd party scripts lately?
    3) Check your index.php/index page for any lines of code you don't recongize or its dependancies.
    4) If all fails reset to the latest back up prior to this issue.

    If you post your details I can take a quick look and see if I can provoke your site to try to infect/attach itself to my browser to determine where the issue is and maybe how it can to be with a little luck.

    Good luck
     
    zebulon, Jan 9, 2009 IP
  3. Mxhub

    Mxhub Active Member

    Messages:
    474
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    55
    #3
    What script are you using? It could be you are still using an outdated script.

    If it is not your script problem, then it maybe the server that host your site got hacked.

    -joseph
     
    Mxhub, Jan 13, 2009 IP
  4. Speakup

    Speakup Banned

    Messages:
    38
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    You can run a scan with either a security program installed or install one.
     
    Speakup, Jan 17, 2009 IP
  5. Linked2K

    Linked2K Peon

    Messages:
    19
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Check your site for iframes, remove them, change all ftp passes and use nessus and Acunetix Web Scanner to find possible exploits.
    [​IMG]
     
    Linked2K, Jan 18, 2009 IP
  6. Saul V

    Saul V Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    Hello,

    The server admin can easily find out what causing it. Checking the process and logs is the best way to find it. Also check for IPs in the logs from which you are getting more hits and it must be blocked since it usually be dos attack. For virus in linux system run a clamscan to find out it. Check your file permissions and secure it.
    It will be helpful if you could tell what error / warning message are you getting on IE
     
    Saul V, Jan 18, 2009 IP
  7. ahbuneh

    ahbuneh Active Member

    Messages:
    204
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    58
    #7
    Have you resolve your Problem? Or not let know your site so someone can check.
     
    ahbuneh, Jan 23, 2009 IP
  8. engineerroy2008

    engineerroy2008 Member

    Messages:
    192
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    33
    #8
    Install avast anti virus in one PC and then open your site in that computer it will surely find out most of the malware and give you a warning ,if its showing then do something to remove malware, its better to hire some support company to remove and secure for further attack, we are seeing that many sites are affected regularly if its affected once
     
    engineerroy2008, Jan 25, 2009 IP
  9. morwanneg

    morwanneg Peon

    Messages:
    194
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Oh gosh, install malwarebytes and see if it somehow solve your problem. Don't forget to change all ftp passes.
     
    morwanneg, Jan 25, 2009 IP
  10. Cr1T1c4L

    Cr1T1c4L Peon

    Messages:
    23
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Im a security analist i helped alot of guys out securing their secret vps etc, if you need any help hit me up @ we can figure something out if your interested =].
     
    Cr1T1c4L, Jan 26, 2009 IP