If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.
These forums remain online primarily for archival purposes. While posting is still possible, it should not be considered a means for support. Please login to our portal and submit a ticket if you require assistance and we'll be more than happy to assist you.
Regular updates are posted to our blog and we will continue to post important notices to the Script Security forum section here. You can subscribe to that forum to automatically receive notifications.
I've had 2 different accounts (under my root account) hacked (one hacked twice)! Both sites are not PHP or mySQL. Just simple HTML. Looks like the files are ad-ware or something. ihtml, a.exe, etc that are called from other sites. Anyone else experience this and is anything being done about it?
The files have been removed by the client. They were located in the "www" directory. If I can get a list of files then I'll submit them in a trouble ticket. Also, clients bandwidth usage went for ~100MB/month to 2GB/month (account limit).
Sounds like your customer isn't being careful with his/her password.
Get them to check their own PC for spyware or other nasty stuff that could be logging keystrokes and similar.
David
p.s. I'm not sure how this relates to the "Script security" thread if it isn't directly linked to a script of some sort..
-----
Do you fear the obsolescence of the metanarrative apparatus of legitimation?
Since this is not exactly script-related, I'm moving it to General Support.
My personal opinion is this:
1. Have them each update/get a good Anti-virius + Ad-Aware (Good program)
2. If they do not have a firewall, turn on XP's (or get ZoneAlarm [good simple firewall])
3. Have them each scan their PCs with both.
4. Change their passwords via cPanel, or you can via WHM (AFTER you clean YOUR PC)
5. Delete ALL files and reupload backups of some sort; alternative, see #6
6. If no backups, download each file and check it by hand and scan it before reuploading.
"How can someone be so distracted yet so focused?"
- C
No one here can tell you what happened exactly with any sort of certainty. We can look into it if you submit a trouble ticket but if anything has been changed since it happened the usefulness of information available will be limited.
A file list alone does not help all that much, you would need to submit a ticket with the account username and not touch anything until we've gone over it.
Comment