Author Topic: Virus on main DD site (Read 7869 times)

Yordai Dooma · « **Reply #21 on:** August 12, 2010, 02:56:39 PM »

Ive got Norton on this computer...no issues...

elikay · « **Reply #22 on:** August 12, 2010, 03:11:44 PM »

Is yours fully updated?

Yordai Dooma · « **Reply #23 on:** August 12, 2010, 03:15:24 PM »

Quote from: elikay on August 12, 2010, 03:11:44 PM

Is yours fully updated?

Last Virus definitions update: 4 minutes ago

elikay · « **Reply #24 on:** August 12, 2010, 03:30:50 PM »

I do

Quote from: David on August 12, 2010, 03:15:24 PM

Last Virus definitions update: 4 minutes ago

I don't know what happened, but I didn't make that up!

Dan · « **Reply #25 on:** August 12, 2010, 03:38:09 PM »

Quote from: elikay on August 12, 2010, 03:30:50 PM

I doI don't know what happened, but I didn't make that up!

Are you getting that for any other sites?
Is anyone else getting a warning?

I went to the site that found the problem last time (http://sucuri.net/) and it found nothing now.

elikay · « **Reply #26 on:** August 12, 2010, 03:46:45 PM »

The main site did not give me a problem (I don't think so, but I bypassed it - I think after I tried the main site).

SuperFlyer · « **Reply #27 on:** August 13, 2010, 04:04:19 AM »

I had a similar kind of trojan on 1 of my sites, which had a 16 character password including special characters.

That is the problem with ready made codings for sites (which are customized later) such as this forum, wordpress, and others, where some nasty guy invests time in finding some security breach, because he knows that he will be able to infect other 100k's of sites from the same kind.

They usually either don't need your password or can extract it somehow.

momo · « **Reply #28 on:** August 30, 2010, 06:40:09 PM »

Hi Dan. I have Kasperskys and i am getting virus message when trying to log onto dansdeals.com.

Yordai Dooma · « **Reply #29 on:** August 30, 2010, 06:48:01 PM »

Quote from: momo on August 30, 2010, 06:40:09 PM

Hi Dan. I have Kasperskys and i am getting virus message when trying to log onto dansdeals.com.

Uh oh, is it back?

I have kaspersky on my home computer...ill check it out when i get home to see if im getting it as well.

Dan · « **Reply #30 on:** August 30, 2010, 07:32:55 PM »

Someone keeps adding a line of code into Wordpress sites hosted by mediatemple:
http://news.softpedia.com/news/New-Mass-Injection-at-Media-Temple-Despite-Extensive-Cleanup-Efforts-152263.shtml

Looks like I may need to find a new host according to that article...

I believe I've fixed the problem for now...please tell me if it's gone now.

SuperFlyer · « **Reply #31 on:** August 30, 2010, 07:37:32 PM »

I have access, but you need to look for all security mods available to your template, such as .htaccess lines to add xss, and so on.

momo · « **Reply #32 on:** August 30, 2010, 07:41:29 PM »

Looks like its fixed

Dan · « **Reply #33 on:** August 30, 2010, 07:42:57 PM »

Quote from: momo on August 30, 2010, 07:41:29 PM

Looks like its fixed

Good.
And I was even able to fix the forum after breaking it trying to delete the virus with some help from a sleeping Eli

SuperFlyer · « **Reply #34 on:** August 30, 2010, 09:20:47 PM »

mr chairman, set some security touches or this is going to keep on happening.

Dan · « **Reply #35 on:** August 30, 2010, 09:29:28 PM »

Quote from: SuperFlyer on August 30, 2010, 09:20:47 PM

mr chairman, set some security touches or this is going to keep on happening.

It's a mass virus injection that's been happening to all Wordpress sites that are hosted by Mediatemple. Google it. Nobody seems to know how to fix it except for changing hosts.

SuperFlyer · « **Reply #36 on:** August 31, 2010, 09:36:06 AM »

So I would change host.

Dan · « **Reply #37 on:** August 31, 2010, 11:19:16 AM »

Quote from: SuperFlyer on August 31, 2010, 09:36:06 AM

So I would change host.

I seem to be past the point of being able to use a shared host.
Bluehost and 1&1 kicked me off for too much traffic and Mediatemple is not just being ridiculous with these viruses, but they're also going to charge me a fortune because I'm using too many "GPUs" for which they charge $$$ for.

Any recommendations?

SuperFlyer · « **Reply #38 on:** August 31, 2010, 12:31:06 PM »

Quote from: Dan on August 31, 2010, 11:19:16 AM

I seem to be past the point of being able to use a shared host.
Bluehost and 1&1 kicked me off for too much traffic and Mediatemple is not just being ridiculous with these viruses, but they're also going to charge me a fortune because I'm using too many "GPUs" for which they charge $$$ for.

Any recommendations?

yes, www.one.com

unlimited bandwidth on regular website files, no mp3 etc, quick live chat support.

Dan · « **Reply #39 on:** August 31, 2010, 12:33:35 PM »

Quote from: SuperFlyer on August 31, 2010, 12:31:06 PM

yes, www.one.com

unlimited bandwidth on regular website files, no mp3 etc, quick live chat support.

Wow, seems to cheap to be true.
Are you hosting sites with them? How is the uptime?
If the difference between the plan just in the online storage space?