Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?


Login with username, password and session length
February 09, 2012, 08:51:16 PM

Pages: [1]   Go Down
« previous next »
  Print  
Author Topic: Website hacked with HEUR:Trojan.Script.Iframer  (Read 9550 times)
Leee14
Newbie
*
Offline Offline

Posts: 4
« on: April 10, 2009, 02:22:02 PM »
Yesterday my website was hacked with this virus: HEUR:Trojan.Script.Iframer.  All of my html pages had added links put into the code.  Luckily I was able to restore them all quickly with my backup files.
But now I've been noticing that every directory has this (file?) in with all the other files:  @@@@!!@@@@

I keep deleting them, but they keep coming back, in EVERY one of my directories.

I've never seen that before. Does anyone know what it is and if it has anything to do with my site being hacked?

Thanks,
Lee
« Last Edit: April 10, 2009, 02:23:44 PM by Leee14 » Logged
Mitch
Berserker Poster
*****
Offline Offline

Posts: 12838


WWW
« Reply #1 on: April 13, 2009, 05:18:21 AM »
I would highly suggest following the steps mentioned here:

http://wiki.lunarpages.com/Web_Site_Security_Breaches

See if you can find the source of the problem first, then you can go about getting everything else cleaned up. 
Logged
New to Web Site Hosting? Check Out the Lunarpages Blog Hosting Guide!

Follow us @lunarpages on Twitter!
Important Threads: Read This Before Posting! | Lunarforums Rules! | Mitch's Link of the Day!
Also, be sure to check out and subscribe to the Lunartics Blog and the Lunarpages Newsletter !

Need Web Hosting Help? Check out the Lunarpages Web Hosting Wiki. It has tons of tips, tutorials and resources!
Gabriel Paiu
SysAdmin
Trekkie
*****
Offline Offline

Posts: 19
« Reply #2 on: October 10, 2009, 02:40:00 PM »
Hi,

I'm sorry to hear about the issue.I have reviewed the situation an opened a ticket in our support desk so we may troubleshoot this issue further and help you deal with the situation. You should have received an e-mail with the reply.

Thank you.
Logged
Leee14
Newbie
*
Offline Offline

Posts: 4
« Reply #3 on: October 12, 2009, 11:56:18 AM »
Quote from: Gabriel Paiu on October 10, 2009, 02:40:00 PM
Hi,

I'm sorry to hear about the issue.I have reviewed the situation an opened a ticket in our support desk so we may troubleshoot this issue further and help you deal with the situation. You should have received an e-mail with the reply.

Thank you.

Hi Gabriel,
I responded to the ticket thinking that it was a mistake or that someone else had logged in with my username and password.   The confusion was on my part because I reported this problem in APRIL and have since resolved the issue.   Sorry, you're about 6 months too late.  Doh  Confused

And thank you Mitch for the link.  It was very helpful.
Logged
Mitch
Berserker Poster
*****
Offline Offline

Posts: 12838


WWW
« Reply #4 on: October 12, 2009, 12:03:47 PM »
Hey, more than welcome - even if it is 6 months later. Very Happy I'm sure Gabriel had the best intention.  Thumbs Up
Logged
New to Web Site Hosting? Check Out the Lunarpages Blog Hosting Guide!

Follow us @lunarpages on Twitter!
Important Threads: Read This Before Posting! | Lunarforums Rules! | Mitch's Link of the Day!
Also, be sure to check out and subscribe to the Lunartics Blog and the Lunarpages Newsletter !

Need Web Hosting Help? Check out the Lunarpages Web Hosting Wiki. It has tons of tips, tutorials and resources!
Pages: [1]   Go Up
  Print  
« previous next »
 
Jump to: