I didn’t even ask about being hacked. I have used the same password for waaaaaaaay too long. So I’m sure some of that fault rests with me.
Last question- what would that virus have done if any of my customers picked it up?
I didn’t even ask about being hacked. I have used the same password for waaaaaaaay too long. So I’m sure some of that fault rests with me.
Last question- what would that virus have done if any of my customers picked it up?
The hosting software is also an area which might be exploited, though more common in php sites.
It is a total unknown as to what might have happened as the iframe went to a Chinese domain and there could be absoultely anything at that end as it is executing a cgi script could be benign in that they are trying to display something to tempt customers to part with money or it could be malicious.
There is just no way to find out without leaving yourself open to the exploit and there is no way I would even consider that.
Guys, it looks like you’re mixing two things together:
The yahoo counters at the end are BENIGN, and Yahoo is right it’s used for their stats.
The chinese iframe at the beginning is DETECTED. You should only remove it and think how it got to your code.
I bought hosting from yahoo, and i have the same problem at the moment. After reading everything here i couldn’t understand what will i do to fix it.
I am near to crying lol…
Can you say me what to add or what to delete from my pages? " ![]()
First please provide us the link to your pages. We are good, but not that good to guess it ;D 8)
Oki
you are right. Here is my links,
www.cemredesigns.com/index.html
www.cemredesigns.com/shop.html
etc.
And, what exactly is your problem? I don’t see anything strange there, and avast! does not find anything there.
Hi kubecj,
You have turned this into one of your specialism, haven’t you? Chapeau! Seen to the 200% increase recently in malicious vectors launched from infected websites, what avast is doing here is really very impressive.
I from my end started some discussion an initiative here to get more interest for the implementation of CSP, also known as Content Security Policy, a security policy for both browsers (IE, Fx, etc.) and web application(s) to set the framework wherein both browser and service can communicate secure, so third parties have no chance of breaking in.
Re: http://forums.mozillazine.org/viewtopic.php?f=48&t=1073125
Just have to see who will jump on the bandwagon with CSP, but until the time the initiative is adhered to on a larger scale we will depend on what avast is doing here and also use script/request/preference blockers like NoScript, RequestPolicy and PrefSwitch,
polonus
oki, it says
!-- text below generated by server. PLEASE REMOVE --><!-- Counter/Statistics data collection code
My page is not that short actually, and only i can see a blank page with a little graphic in left side when i enter my website
This is perfectly legal code from yahoo. Nothing malicious.
I still don’t know why they saw fit to put their code outside of the html closing tags. I don’t know if jebje’s page has the code in the same place as the OP, but why would they do that?
Oh well.
We are having the same problem. we run a website called WWW.THEWIREGRASSNEWS.COM and all other virus program users has no problems. We have no virus on our site and only AVAST users contacts us and sais they can not view our site cause avast sais there is a virus and tells them avast sais that there is an infected page html:lframe-in on our site.
this is weird only avast users has this problem what can be done?
@thewiregrassnews
if you need help it is best to start your own topic and not post inside someone elses
so to your problem
VirusTotal URL scan
http://www.virustotal.com/url-scan/report.html?id=5e16c0664068924bd5c4cc960d867b66-1310680761
VirusTotal HTML scan
http://www.virustotal.com/file-scan/report.html?id=b27fbaea5a1f3e5b54af06e71d6554d44e9542c46de3fc1b22d90341b13f2275-1310688463
This page seems to be 3 hidden external links found.
http://www.UnmaskParasites.com/security-report/?page=www.thewiregrassnews.com
avast is alerting on the iframe that is hinted at by UnmaskParasites.
You can use Sucuri Sitecheck. It shows all problem pieces of code for this site
http://sitecheck.sucuri.net/scanner/
Sucuri
Site: http://www.thewiregrassnews.com
Status: Site infected with malware
Trust: Not Blacklisted
I, Like the first poster am a business owner. I run a small on line hobby shop or at least try to.
I have been getting mixed feedback from clients.
Some say they can access my site while others say they cannot.
I downloaded trial version of avast and have come up with this same error on my site on many pages inc ones I had done by a professional webmaster. I did the search for the words lframe and inf and came up empty.
Can someone please tell me what may be going on? Main site is www.ladygouldianfinch-ca.com
Any help appreciated ![]()
Thank You for your time : )
Well see the issues here with hidden i-frames: http://sitecheck.sucuri.net/results/www.ladygouldianfinch-ca.com/
Loads malware from multiple sources:
There are a couple of security issues also, see: http://com.saferpage.de/ladygouldianfinch-ca
Gives away via X-Powerded by http header that content is dynamically being generated, should be avoided;
sends out full version numer of webserver software to the world (and malcreants), this can be remedied,
http://www.cyberciti.biz/faq/rhel-centos-hide-httpd-version/ (link article author vivek gite:
Use of Flash and the use of LSO cookies
polonus