Website Hijacked?!

Discussion in 'Security' started by kinkarso, Jun 21, 2009.

  1. #1
    Uhoh, it looks like there is some type of virus on my website, christianavenue.org. If you visit it, it shows a malware warning. In IE, it passes through and my anti-virus software detects something. This is what it said:

    http://img37.imageshack.us/img37/9274/errorebx.jpg

    Anyone have any ideas as to how to get rid of this, and where to look? :)

    Appreciated.

    Thanks,
    Donny
     
    kinkarso, Jun 21, 2009 IP
  2. farhang

    farhang Active Member

    Messages:
    383
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    60
    #2
    Remove everything from your page below

    $t->assign ( 'login_error', get_lang('errormsgs',$_GET['errid']) );
    Code (markup):
     
    farhang, Jun 21, 2009 IP
  3. kinkarso

    kinkarso Well-Known Member

    Messages:
    358
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    120
    #3
    Thanks, I think that fixed it :).
     
    kinkarso, Jun 23, 2009 IP
  4. RectangleMan

    RectangleMan Notable Member

    Messages:
    2,825
    Likes Received:
    132
    Best Answers:
    0
    Trophy Points:
    210
    #4
    You also need to find out how that was added in order to prevent the exploit from happening again.

    btw..you're infected again. Until it's resolved you should take your site offline. You are infecting members and if Google finds out it will delist you quickly or add a malware warning.
     
    RectangleMan, Jun 26, 2009 IP
  5. SSANZ

    SSANZ Peon

    Messages:
    861
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Patch the vulnerabilities and remove malicious code asap, your PR will be effected.
     
    SSANZ, Jun 29, 2009 IP
  6. kinkarso

    kinkarso Well-Known Member

    Messages:
    358
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    120
    #6
    I just can't figure it out.. it looks like it's not in the same place this time, there used to be a bunch of code in index.php. Anyone have any ideas?
     
    kinkarso, Jul 4, 2009 IP
  7. jakoob

    jakoob Well-Known Member

    Messages:
    502
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    136
    Articles:
    1
    #7
    got the same problem
     
    jakoob, Jul 20, 2009 IP