Virus/Trojan on Forum.

tyv;497186 said:
It seems, something is hiding on the code, maybe behind a image or something and "tries" to load up as part of the site.
Click to expand...

Usually that's the case when sites have [words=http://www.phallosan.com/shop/catalog/default.php?z=eNortjIxtVKyL0pNszWxMFcrSSxKTy2JL0hMT7U1UisoykyxtbBQSy4tLsnPjS8uKcrMS7dVsgZcMMpbEbo%2C]ads[/words] loading or are affiliated with a ad display network that loads things from another server. This is merely someone having access through a certain thing on the server(anything from xss/sql injection/plugin fault/ftp issue/etc).


I mean even just looking in the html source shows this(highlighted iframe portion towards the right):

vr6hwg.jpg
 
Yeah. There's another if you hit iframe again. There's also some I bet that are on other sections of the site. There seems to be 3 total.

You would have to look through your .php's DLD and just figure out how they're getting there.
 
Looks like it is back....I am on it right now
 
hepcat;497302 said:
The only problem I'm having is the links on the homepage all lead to a blank white screen.
Click to expand...

Something is not right, they are working on it already.
 
hepcat;497306 said:
The white screens linked from the homepage also happened last time, but at least I can get on the forums without a problem.
Click to expand...

Hep, what link are you speaking of? Can you paste it here?
 
Any word of this from the weBathmateaster? There is still a website loading a trojan in the code and there could be others as well since all I can see is the stuff in html.
 
smerc;497563 said:
Any word of this from the weBathmateaster? There is still a website loading a trojan in the code and there could be others as well since all I can see is the stuff in html.
Click to expand...


They are rescanning but said we showed nothing. What are you showing on your scan?
 
smerc;497698 said:
Seems that it's gone today. Everything seems to be okay.
Click to expand...


Awesome, let me know if you detect anything, you seem to be very on the ball with this. Thanks Smerc!
 
sir wankalot;499282 said:
My virus protection is still saying this site is unsafe,although I know its not.
Click to expand...


Can you post what it is saying?
 
"There is a problem with this websites security certificate.The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website."

Whatever that means.
 
sir wankalot;499381 said:
"There is a problem with this websites security certificate.The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website."

Whatever that means.
Click to expand...


Thanks I will send it to the techs
 
sir wankalot;499381 said:
"There is a problem with this websites security certificate.The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website."

Whatever that means.
Click to expand...


They asked me this: "Please ask them for exact URLs where they get those SSL-related warnings."

Do you have a url?
 
You must log in or register to reply here.
Back
Top