visiting this web site may harm your computer - GoFuckYourself.com

LA Crew · 07-28-2009, 03:49 AM

it seems that my blog distributing malware and malicious code was added by third parties. Any suggestion please

natkejs · 07-28-2009, 03:56 AM

Your WordPress installation has likely been compromised.
Contact your host and ask them to look for recent suspicious activity.

We had an issue like this a while ago, an account had been compromised which let the intruder inject code to our blogs. MojoHost were able to track it down and added extra security to prevent it from happening again.

Thank god for technical support

[ Nate ] · 07-28-2009, 04:03 AM

Quote:

Originally Posted by LA_quince

it seems that my blog distributing malware and malicious code was added by third parties. Any suggestion please

I had the same problem across my whole blog network (that sounded big but its only 8 blogs...lol) For me it was the gumblar.cn exploit and then it changed to martuz.cn. Once you remove whatever it is you have to submit your site to google to have the warning taken off. I found a tool to remove my problem automatically but I can't find the bookmark to shoot you a link. If you google around you'll find it.

[ Nate ] · 07-28-2009, 04:06 AM

Found it. If its the same thing here is a link to the removal tool. http://www.danielansari.com/wordpres...martuz-trojan/

Good luck!

[ Nate ] · 07-28-2009, 04:07 AM

Quote:

Originally Posted by [ Nate ]

Found it. If its the same thing here is a link to the removal tool. http://www.danielansari.com/wordpres...martuz-trojan/

Good luck!

P.S.-I have to take it off my design site as well...lol.

LA Crew · 07-28-2009, 04:30 AM

the last info I've got from host support, that my site was attacked by Russian hackers.

dav3 · 07-28-2009, 04:34 AM

thats sucks, good luck

Emma · 07-28-2009, 09:03 AM

There are many different types of these injection codes. Some use php code that is encoded, some use java script and some just use simple iFrames. They all result in loading a remote url that is generally a virus installer.

07-28-2009, 03:49 AM	#1
LA Crew Confirmed User Join Date: Jan 2008 Location: city of angels Posts: 1,356	visiting this web site may harm your computer it seems that my blog distributing malware and malicious code was added by third parties. Any suggestion please __________________

07-28-2009, 03:56 AM	#2
natkejs Confirmed User Industry Role: Join Date: Jan 2003 Location: Nomad Land Posts: 1,629	Your WordPress installation has likely been compromised. Contact your host and ask them to look for recent suspicious activity. We had an issue like this a while ago, an account had been compromised which let the intruder inject code to our blogs. MojoHost were able to track it down and added extra security to prevent it from happening again. Thank god for technical support __________________

07-28-2009, 04:06 AM	#4
[ Nate ] Confirmed User Industry Role: Join Date: Mar 2007 Location: Asia Posts: 1,468	Found it. If its the same thing here is a link to the removal tool. http://www.danielansari.com/wordpres...martuz-trojan/ Good luck! __________________ Ladyboy Inc. / Asian Money Machine

07-28-2009, 04:30 AM	#6
LA Crew Confirmed User Join Date: Jan 2008 Location: city of angels Posts: 1,356	the last info I've got from host support, that my site was attacked by Russian hackers. __________________

07-28-2009, 04:34 AM	#7
dav3 Confirmed User Industry Role: Join Date: May 2007 Posts: 7,348	thats sucks, good luck __________________ Webmasters :: Juicy Ads :: ACWM :: Crak Revenue :: Money Tree

07-28-2009, 09:03 AM	#8
Emma Confirmed User Join Date: Apr 2003 Location: England Posts: 2,288	There are many different types of these injection codes. Some use php code that is encoded, some use java script and some just use simple iFrames. They all result in loading a remote url that is generally a virus installer.