FUCK ME@#$#@$ Maybe hacked can somone look at this code for me please? - GoFuckYourself.com - Adult Webmaster Forum

X

Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#1

FUCK ME@#$#@$ Maybe hacked can somone look at this code for me please?

10-11-2004, 03:29 AM

This seems to be on a lot of my web pages on my server
<.....script language...="ja.vascript">
window.open ("http://vb-aus.com/traff/index.php","","toolbar=1,location=1,status=1,men ubar=1,scrollbars=1");
window.focus ();
</sc.rip.t>
\
I put in . so it wont work here. Has anyone seen this before?
TOM
Tags: None
nastyking

Join Date: Nov 2002

Posts: 2174
Share

Post
#2

10-11-2004, 03:31 AM

yes, it's the infamous "test popup" virus. very dangerous in the wild.
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#3

10-11-2004, 03:32 AM

Originally posted by nastyking
yes, it's the infamous "test popup" virus. very dangerous in the wild.

Ok its even on webpages that I havent even touched in months, is there a fix I need all info to show my host. How the hell grrrrr
Comment
nastyking

Join Date: Nov 2002

Posts: 2174
Share

Post
#4

10-11-2004, 03:34 AM

Originally posted by va2k
Ok its even on webpages that I havent even touched in months, is there a fix I need all info to show my host. How the hell grrrrr

there is no way to fix it. you are doomed.
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#5

10-11-2004, 03:35 AM

it seems to be only on index.html pages
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#6

10-11-2004, 03:36 AM

Originally posted by nastyking
there is no way to fix it. you are doomed.
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#7

10-11-2004, 03:50 AM
Comment
justsexxx

Too lazy to set a custom title

Join Date: Aug 2001

Posts: 13723
Share

Post
#8

10-11-2004, 03:55 AM

Kaspersky blocked access to that page. So I guess it's full of shit code. How it could be on your page? No idea..Ask your host. Who is it?

Questions?

ICQ: 125184542
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#9

10-11-2004, 03:58 AM

Originally posted by justsexxx
Kaspersky blocked access to that page. So I guess it's full of shit code. How it could be on your page? No idea..Ask your host. Who is it?

yea its weird HAVE NO idea how it got on my pages I put in a request to the host and knowing my host they will have it taken care of asap. At least ya tried to help, Thanks bro

I have no clue on these types of things... IM doing another scan on my home pc to see if it is something on my end that caused this doubt it though.. There are static webpages on my server that has this code in it. If it aint one person trying to fuck you its a whole network
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#10

10-11-2004, 04:11 AM

For one of the biggest boards I am very supprised to see no one knows of this

TOM
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#11

10-11-2004, 07:09 AM
Comment
inabon

Good Old Fat Webmaster

Join Date: Jul 2002

Posts: 970
Share

Post
#12

10-11-2004, 07:32 AM

what operating system is your webs server running?

Whoever dies with most toys wins.
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#13

10-11-2004, 08:22 AM

Originally posted by inabon
what operating system is your webs server running?

LINUX
Comment
candyflip

Carpe Visio

Join Date: Jul 2002

Posts: 43072
Share

Post
#14

10-11-2004, 08:25 AM

Originally posted by va2k
LINUX

A bit more specific perhaps? There are many variations.

Spend you some brain.
Email Me
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#15

10-11-2004, 08:28 AM

Originally posted by candyflip
A bit more specific perhaps? There are many variations.

Linux version 2.4.20-28.7
([email protected]) (gcc version 2.96 20000731 (Red Hat Linux 7.3 2.96-126))
Comment
SmokeyTheBear

►SouthOfHeaven

Join Date: Jun 2004

Posts: 28609
Share

Post
#16

10-11-2004, 09:05 AM

not hacked , but you have a virus on the server that re-wrote your html files.

dont just delete them.

notify your host that they have been hacked and make them fix it.

hatisblack at yahoo.com
Comment
SmokeyTheBear

►SouthOfHeaven

Join Date: Jun 2004

Posts: 28609
Share

Post
#17

10-11-2004, 09:07 AM

ps. dont let them try to convince you this was your fault ( unless its your own server then it is your fault kind of )

hatisblack at yahoo.com
Comment
cfU

Confirmed User

Join Date: Jan 2003

Posts: 933
Share

Post
#18

10-11-2004, 09:18 AM

delete everything and throw your server away.
Comment
justsexxx

Too lazy to set a custom title

Join Date: Aug 2001

Posts: 13723
Share

Post
#19

10-11-2004, 09:49 AM

What host is it? And do you manage the box or is it managed?

Andre

Questions?

ICQ: 125184542
Comment
TheMob

Confirmed User

Join Date: Jan 2003

Posts: 8584
Share

Post
#20

10-11-2004, 09:50 AM

is it reall worth dealing with?
Comment
fris

I have to go potty

Join Date: Aug 2002

Posts: 55785
Share

Post
#21

10-11-2004, 09:51 AM

Originally posted by SmokeyTheBear
not hacked , but you have a virus on the server that re-wrote your html files.

dont just delete them.

notify your host that they have been hacked and make them fix it.

not a virus on a linux server

Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence.

Totally Free Templates
Comment
Project-Shadow

Confirmed User

Join Date: Feb 2003

Posts: 7340
Share

Post
#22

10-11-2004, 10:24 AM

Originally posted by fris
not a virus on a linux server

http://math-www.uni-paderborn.de/~axel/bliss/
Comment
lb_vee

Confirmed User

Join Date: May 2004

Posts: 886
Share

Post
#23

10-11-2004, 10:43 AM

Here are a few things you can do to prevent this from happening again:

1) switch to ssh from telnet and kill the telnet daemon.

2) kill the ftp daemon and use scp (with ssh)

3) modify the hosts.allow files to allow access from only a few IPs (for ssh)
Comment
inabon

Good Old Fat Webmaster

Join Date: Jul 2002

Posts: 970
Share

Post
#24

10-11-2004, 10:47 AM

and check your file permissions it is pretty weird that they rewrote all your files.
somehow they gained ftp access with privileges
or your permissions or server are not safely configured.

i have only seen virus attack IIS not apache.

Whoever dies with most toys wins.
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#25

10-11-2004, 10:49 AM

Originally posted by inabon
and check your file permissions it is pretty weird that they rewrote all your files.
somehow they gained ftp access with privileges
or your permissions or server are not safely configured.

i have only seen virus attack IIS not apache.

Holy fuck i think i know what happend thanks all
Comment
jade_dragon

Confirmed User

Join Date: May 2004

Posts: 1737
Share

Post
#26

10-11-2004, 10:54 AM

If you were being hacked 9 times out of 10 your keys would be logged. And there is nothing a malicious hacker hates more than when you go running around talking about you got hacked. So in the future, get on another computer that is not infected or call someone and ask them to help or get help. Chatting with your friends or typing "Man I think I am being hacked" does nothing more than empower the person there watching you, they feed on fear and when they are found out, usually punish you by deleting files or using the info they have found about you.

even ADULTS need TOYS
icq: 3 6 3 2 6 6 6 7 | aim: conglomorateman
open for business, affiliates and friendships
Comment
Va2k

I’m still alive barley.

Join Date: Oct 2001

Posts: 10060
Share

Post
#27

10-11-2004, 10:59 AM

Originally posted by jade_dragon
If you were being hacked 9 times out of 10 your keys would be logged. And there is nothing a malicious hacker hates more than when you go running around talking about you got hacked. So in the future, get on another computer that is not infected or call someone and ask them to help or get help. Chatting with your friends or typing "Man I think I am being hacked" does nothing more than empower the person there watching you, they feed on fear and when they are found out, usually punish you by deleting files or using the info they have found about you.

Damn never thought about it like that, but it wasn't me being hacked Think we fig it out a simple mistake. But my hosting company is top notch and I really was never scared only thing I was, was pissed thinking I had to re upload things over again..

Thanks everyone for your input and inabon

Tom
Comment

Previous template Next

Working...