Author Topic: we've been hacked - urgent question  (Read 2340 times)

lynda.kane

  • Posts: 49
    • View Profile
    • http://www.realhealth-online.com
we've been hacked - urgent question
« on: November 21, 2008, 12:32:02 pm »
Hi,

All the index.html and index.php files in our server have been hacked, down to 5 or 6 levels of subfolders.  i'm now in the midst of cleaning them.  I have found this code in a folder called /attach under th emain mail folder on teh server.  Is "attch" a genuine Lismail pro folder or has th ehacker inserted this?  I've been removing all teh biztraff links from all the index files it's in but I'm not sure about all teh german stuff below . . . #


Thanks for any quick responses - Google have marked us as an 'attack site' because of all this :( - so trying to get it all clean asap.

Lynda

<html>
<head>
</head>
<title></title>
<body bgcolor=#FFFFFF text=#001C66 <body><div><iframe></iframe></div>>

<table>
       
   <tr>
    <td><img></td>
    <td><font>
This domain has just been registered for one of our customers!<br>
Domain registration and webhosting at best prices.<br>
<a><img></a></font></td>

  </tr>
   
    <tr>
    <td>&nbsp;</td>
    <td>
   </td>
</td>

  </tr>
</table>
</body>
</html>
Comments from the Energy Awareness Training

"A truly transformational weekend."
"the most EMPOWERING of anything I've done before."
"I didn't realise it was going to change my life!"

www.EAT.energyawareness.org
www.EnergyEgg.com
Tel :  +44 (0)207 617 7521

lynda.kane

  • Posts: 49
    • View Profile
    • http://www.realhealth-online.com
we've been hacked - urgent question
« Reply #1 on: November 21, 2008, 12:34:24 pm »
the file is 'index.html ' in the /attach foler, which seems to be attachments.  Does this subfolder normally have an index.html file in it?

Tks,

Lynda
Comments from the Energy Awareness Training

"A truly transformational weekend."
"the most EMPOWERING of anything I've done before."
"I didn't realise it was going to change my life!"

www.EAT.energyawareness.org
www.EnergyEgg.com
Tel :  +44 (0)207 617 7521