Posts Tagged ‘iframe’

Iframe malware attack – Solved

Posted on the July 4th, 2009 under Codinggg.., PHP, Share by Shailesh Patel

Here I am again come with well solution of IFRAME malware wattack.

For that you need to follow the steps are :

  1. Clean your system from the virus. [In this condition your system will be affected with trojan mostly ]
  2. When you are sure for that, your system is cleaned you have to change your FTP Account details.
  3. Then remove your file from the server which name contains: index, home, site, default and extenstions are htm, html, php, asp.
  4. And replace it with new files from your cleaned system.

Mostly these steps are enough to clean your system. But still if you got this kind of problem then you must need to decode the iframe and for that you need to create a script in PHP or you can mail me to get that script.

For more detailed report : Iframe attack a research report

I notice from my R&D that no one antivirus can clean it, it will just removed that file in that case you should lost your data so don’t trust any antivirus

Iframe attack a research report

Posted on the June 27th, 2009 under Codinggg.., Share by Shailesh Patel

Reportedly, in July 2007 there is a new massive hacking attack on web sites.
This attack targeted primarily budget Webhosting providers but it was not limited
to them. For example several site from HBS were compromised too.

It looks like the attack usually has two stages.

  • Account passwords harvesting. On the first state they collect passwords
    for the accounts.  We will call this stage “account passwords harvesting”.
    Details on how they do that are fuzzy. The truth is that on a typical Linux
    server it might enough to get just one user account password to be in a
    reasonably good position to get the root via some king of little known or
    unpatched exploit. Zones and jails are better in this respect as they
    protect other users from easily compromised “suckers” who happily use
    passwords like 123456 or use infected with spyware PCs at home.
    Actually the complexity of the password should be beefed up to at least 8
    characters. But this does not help if the user computer is infected with a
    keylogger.  ISPs need to handle vastly difference classes of users and
    security is always as good as the weakest link.

Read more…