Help!!! MALICIOUS attack - GoFuckYourself.com

smutnut · 05-12-2010, 06:57 AM

Just got attacked on a site I got a phone call about yesterday

MALICIOUS SITE www4 suitcase52td (dot) com (DON'T WANT TO MAKE THIS CLICKABLE). JS redirect

Any info on where I can find the codes quickly and erase them? It's on all domains on that hosting account.

JUST WHEN I WAS GOING TO STOP DRINKING TODAY (again) TOO!

thanks in advance by the way if anyone can help, just in case I don't get back here cause my computer gets shut down or something.

halfpint · 05-12-2010, 07:12 AM

try this

http://stopmalvertising.com/malverti...hack/all-pages

awxm · 05-12-2010, 07:12 AM

http://stopmalvertising.com/malverti...wordpress-hack

lol he beat me to it

MetaMan · 05-12-2010, 07:13 AM

smutnut · 05-12-2010, 07:37 AM

Quote:

Originally Posted by halfpint

try this

http://stopmalvertising.com/malverti...hack/all-pages

Thanks

Think I found it

smutnut · 05-12-2010, 11:28 AM

Man this is a pain in the ass. They got that shit in there deep and good

I supposed I should change my ftp too now

seeandsee · 05-12-2010, 11:43 AM

Quote:

Originally Posted by MetaMan

LoveSandra · 05-12-2010, 11:58 AM

Quote:

Originally Posted by MetaMan

fatfoo · 05-12-2010, 02:13 PM

Good luck with your drinking problem.

- Fatfoo

halfpint · 05-12-2010, 02:19 PM

have you got it sorted now ?

smutnut · 05-12-2010, 02:36 PM

Quote:

Originally Posted by halfpint

have you got it sorted now ?

I'm actually still fucking with it, but I have all the code. It's all over the place though and on sub domains and everything. Thinking this is when I should have studied and set up wordpress mu instead of standards.

You think they have my ftp shit?

halfpint · 05-12-2010, 02:39 PM

Quote:

Originally Posted by smutnut

I'm actually still fucking with it, but I have all the code. It's all over the place though and on sub domains and everything. Thinking this is when I should have studied and set up wordpress mu instead of standards.

You think they have my ftp shit?

damm sorry to hear that, and as to the ftp I really couldent tell you but if it was me I would change everything just to be on the safe side

smutnut · 05-12-2010, 02:49 PM

Quote:

Originally Posted by halfpint

damm sorry to hear that, and as to the ftp I really couldent tell you but if it was me I would change everything just to be on the safe side

Yeah, I was pretty much planning that.

If they didn't get my best converting niche, I would have just deleted the entire sites LOL and saved myself the headache. My traffic is so down today it's not funny.

P.S. thanks for your help. It wasn't the same code but got me in the general area.

TeenCat · 05-12-2010, 02:53 PM

smutbutt

halfpint · 05-12-2010, 02:55 PM

Quote:

Originally Posted by smutnut

Yeah, I was pretty much planning that.

If they didn't get my best converting niche, I would have just deleted the entire sites LOL and saved myself the headache. My traffic is so down today it's not funny.

P.S. thanks for your help. It wasn't the same code but got me in the general area.

NP I know whats its like to have this done to sites, just glad you are at least getting it sorted out

smutnut · 05-12-2010, 03:05 PM

Quote:

Originally Posted by halfpint

NP I know whats its like to have this done to sites, just glad you are at least getting it sorted out

It's happened to me before and I have to admit I left this hosting account the most vulnerable because it was rolling along and getting sign ups and I didn't want to change the ratio inadvertantly for no reason.

smutnut · 05-12-2010, 03:12 PM

Quote:

Originally Posted by halfpint

NP I know whats its like to have this done to sites, just glad you are at least getting it sorted out

I think I'm going to have problems for a few days until I figure this out exactly. finding extra admins in my wordpress user areas and everything, so going through the motions, but I get to watch a lot of television and think very little while I sort this all out LOL

P.S. and it's only one hosting account. I have others to cover myself

halfpint · 05-12-2010, 03:21 PM

Quote:

Originally Posted by smutnut

I think I'm going to have problems for a few days until I figure this out exactly. finding extra admins in my wordpress user areas and everything, so going through the motions, but I get to watch a lot of television and think very little while I sort this all out LOL

P.S. and it's only one hosting account. I have others to cover myself

Damm they sure have a made a mess of things by the sounds of it

smutnut · 05-12-2010, 04:03 PM

Quote:

Originally Posted by halfpint

Damm they sure have a made a mess of things by the sounds of it

I have most of it covered, but I want to be prepared for part two so I'm not trying to make it too secure at this moment. I don't understand how they get at you this quick and plant shit all over certain pages in a matter of hours, but they have to be coming in through a hosting vulnerability because it's all on that one hosting account

05-12-2010, 06:57 AM	#1
smutnut So Fucking Banned Industry Role: Join Date: Jul 2007 Location: Babylon Posts: 5,889	Help!!! MALICIOUS attack Just got attacked on a site I got a phone call about yesterday MALICIOUS SITE www4 suitcase52td (dot) com (DON'T WANT TO MAKE THIS CLICKABLE). JS redirect Any info on where I can find the codes quickly and erase them? It's on all domains on that hosting account. JUST WHEN I WAS GOING TO STOP DRINKING TODAY (again) TOO! thanks in advance by the way if anyone can help, just in case I don't get back here cause my computer gets shut down or something. Last edited by smutnut; 05-12-2010 at 06:59 AM..

05-12-2010, 07:12 AM	#2
halfpint GFY's Halfpint Industry Role: Join Date: Jun 2007 Location: UK Posts: 15,223	try this http://stopmalvertising.com/malverti...hack/all-pages __________________ Get FREE website listings on Cryptocoinshops.net

05-12-2010, 07:12 AM	#3
awxm Confirmed User Industry Role: Join Date: Aug 2009 Posts: 819	http://stopmalvertising.com/malverti...wordpress-hack lol he beat me to it __________________ .

05-12-2010, 02:13 PM	#9
fatfoo ICQ:649699063 Industry Role: Join Date: Mar 2003 Posts: 27,763	Good luck with your drinking problem. - Fatfoo __________________ Send me an email: [email protected]

05-12-2010, 02:19 PM	#10
halfpint GFY's Halfpint Industry Role: Join Date: Jun 2007 Location: UK Posts: 15,223	have you got it sorted now ? __________________ Get FREE website listings on Cryptocoinshops.net

05-12-2010, 07:13 AM	#4
MetaMan I AM WEB 2.0 Industry Role: Join Date: Jan 2003 Posts: 28,682

05-12-2010, 11:28 AM	#6
smutnut So Fucking Banned Industry Role: Join Date: Jul 2007 Location: Babylon Posts: 5,889	Man this is a pain in the ass. They got that shit in there deep and good I supposed I should change my ftp too now

05-12-2010, 02:53 PM	#14
TeenCat Too lazy to set a koala Industry Role: Join Date: Jan 2007 Location: CZ/EU forever! Posts: 16,139	smutbutt __________________ 6bot / Coming again very soon! Svit Zlin Radio 24/7!