Pages: [1]
Tags: 2011 FILEMANAGEMENT GOOGLE GSPOT MALWARE SEPTEMBER URLS WEBAPP ACCIDENTAL ANKARAHHH ANYMORE AUTO COM GALFRSAT INTERSTITIAL PLS URL WMT
  Author: Topic: Malware notification regarding http://ankarahhh.co
offline gspot
Last Visit: 12/12/11

Moderator
Dev
Joined: 04/22/08
Forum Posts: 327
 Malware notification regarding http://ankarahhh.co
 Posted on: 09/07/11 at 12:46:17

Hi On, again the same, I can not access anything anymore, I did delete the mentioned folder as below, but can you pls make it work again...I was also away for a long time..I can access only the host site including the Filemanagement, and not via the WebApp. So what is now necessary and what you need, let me know and we shall start immediately to recover the site thanks..
Let me know immediately I may delete all the files if necessary, as it seems the security here does not work...on on
Gspot
email me at gspot@ankarahhh.com

*****************


----- Original Message -----
From: wmt-noreply@google.com
To: gspot@ankarahhh.com
Sent: Wednesday, September 07, 2011 11:17 AM
Subject: Malware notification regarding http://ankarahhh.com... external link/


Dear site owner or webmaster of ankarahhh.com,

We recently discovered that some of your pages can cause users to be infected with malicious software. We have begun showing a warning page to users who visit these pages by clicking a search result on Google.com.

Below are some example URLs on your site which can cause users to be infected (space inserted to prevent accidental clicking in case your mail client auto-links URLs):

http://ankarahhh... external link .com/galfrsat/
http://www.ankarahhh... external link .com/galfrsat/

Here is a link to a sample warning page:
http://www.google.com... external link
***************



ankaraHHH.com
On On
G*
Logged
       
offline gspot
Last Visit: 12/12/11

Moderator
Dev
Joined: 04/22/08
Forum Posts: 327
 Re: Malware notification regarding http://ankarahh
 Posted on: 09/12/11 at 20:47:22

Interesting...does this forum not working anymore? Is On (Admin) not working here anymore?..My Website hacked and stuck...it says:
" The server encountered an unexpected condition which prevented it from fulfilling the request."...I want either start from zero, or upgrade to a higher version. Is there any help or so...or are you all in summer vacation? Thanks.
G*




ankaraHHH.com
On On
G*
Logged
       
offline maxisky
Last Visit: 12/29/12

Level 1
Joined: 04/25/07
Forum Posts: 7
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/01/11 at 05:16:35

Did you log into your cpanel and view the error log to find out why you are getting a 500 Internal Server Error?



Philosophy: A route of many roads leading from nowhere to nothing...
Logged
       
offline gspot
Last Visit: 12/12/11

Moderator
Dev
Joined: 04/22/08
Forum Posts: 327
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/02/11 at 16:08:44

Hey you all smart guys, I could not access the error log...forget it...tell me rather how can I get rid of this web up skin...how and where can I change modify the config file? it comes this:
a)" The server encountered an unexpected condition which prevented it from fulfilling the request. The script had an error or it did not produce any output. If there was an error, you should be able to see it in the error log. "

As it came lots of warnings from google like " be infected with malicious software ", I have deleted all the photo galleries with the index.html (obviously all the infections were set on index files for photo galleries.)
So please help to get rid of the skin or help to make it work, thanks...I guess there are not that much members here to help out? heh?
G*
P.S: I wonder why you still distribute this program, when you can not support it, are the admins all on holidays ???? thanks..




ankaraHHH.com
On On
G*
Logged
       
offline Jack Deth
Last Visit: 09/03/17

Administrator
Dev
Joined: 02/13/05
Forum Posts: 3723
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/02/11 at 18:43:13

Last time this happened...  your hosting was hacked...

guess what genius...  same story this time...

login to your site...  back up everything...

run spyware/malware/virus scans on your backed up files...

wipe everything....

inform your ISP yuour site was once again hacked...

once they fix the security issue on their side...

install a fresh web-app install...  then add in the necessary backed up database info into the correct corresponding areas one section at a time...  such as download, links, forums... news yada yada...

make sure to refresh your cache while doing this as it is needed to update the system immediately....

once your site is back up you can take a new backup and relax...


or...  change your ISP and install all fresh and install backup...

zzzzzzzzzzzzzzzzzz

stop whining...



Beta-Tester Extraordinaire.

Testing on various platforms and operating systems...

http://www.2xlnt.com... external link
http://www.themeapp.com... external link
Logged
       
offline gspot
Last Visit: 12/12/11

Moderator
Dev
Joined: 04/22/08
Forum Posts: 327
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/02/11 at 20:04:22

1-I can not access web site via your web app skin as mentioned before...!
2- I did wipe out almost everything. No need for a scanning by now.
3- Want for now only get off the " The server encountered an unexpected condition which prevented it from fulfilling the request. The script had an error or it did not produce any output. If there was an error, you should be able to see it in the error log. " page..!!!!
4- I did inform my ISP, several times, I should change all FTP passwords etc. etc...WHICH I did Several Times, and they do not care...
5- Just Tell me how I can access now the web site via web app, or tell me how to get rid off the web app skin.
6- I do not need to back up the web site, as I wiped out the whole photo galleries!
7- Just tell me how to overcome the error page and so to get access to the web app.
8- I have access only via the provider web site FileManagement facility.
9- Is ON not anymore admin here?
Thanks



ankaraHHH.com
On On
G*
Logged
       
offline Jack Deth
Last Visit: 09/03/17

Administrator
Dev
Joined: 02/13/05
Forum Posts: 3723
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/09/11 at 17:09:02

Have you tried to FTP into the site and check out if the files may be missing or corrupted?

...



Beta-Tester Extraordinaire.

Testing on various platforms and operating systems...

http://www.2xlnt.com... external link
http://www.themeapp.com... external link
Logged
       
offline gspot
Last Visit: 12/12/11

Moderator
Dev
Joined: 04/22/08
Forum Posts: 327
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/11/11 at 17:41:11

Yes I did and FTP works. I can not see or judge, if any file is missing or corrupted.
(I have deleted ALL the galleries with the photos and their html and index files, as
all the infections and/or hacking were on the index.html s)
Just give me a hint how to get rid of the page:
" The server encountered an unexpected condition which prevented it from fulfilling
the request."
Where exactly is the web-app main config file, and what is exactly it's name and
extension.
I may start then again a new configuration, with a new page or so,
then if its works (I have to present the clean site to google), and I will start a
new web site, or update it with your new web-app grade, version 2 or so.
Thanks



ankaraHHH.com
On On
G*
Logged
       
offline Jack Deth
Last Visit: 09/03/17

Administrator
Dev
Joined: 02/13/05
Forum Posts: 3723
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/16/11 at 17:31:55

from a 2 second look at your site...  I am making a guess for you...

your hosting looks to me to be splitting up your cgi-bin folder from the html files of the script...

so when you ftp in you might see 2 folders...  one is html or pub_html or public or something like that...  it would hold your standard files such as pics, images, themes, html, etc...  you should see your index.html file there which forwards to your index.cgi file...

while another folder called cgi-bin would have all of the coding of web-app in it...
you should see your index.cgi and such other similar nonsense...  here is where the script keeps the actual web-app code along with your database...

long story short your hosting is a pain in the ass and has seperate folders...  so its just slightly more difficult than installing on hosting which allows scripts to run anywhere...

look for the cgi-bin folder and try and find your /db folder...

another thing...  go into your ISPs control panel and check the error log...  I know you checked it alreay...  but now look again and see if you can find the "scripting error log" or the CGI Error Log...  or whatever other name they might have to make your life a pain trying to find simple information which im sure is there but a few extra clicks away...

long story short, if you want to wipe the site copmletely and start fresh...

just empty out your cgi-bin folder... and your /html folder (whatever thats called) and then your site should be completely empty...  then your ready for a copmlpete fresh install of whatever you want...

I would recommend sticking with web-app.net packages as the future upgrade is looking amazing...



Beta-Tester Extraordinaire.

Testing on various platforms and operating systems...

http://www.2xlnt.com... external link
http://www.themeapp.com... external link
Logged
       
offline On
Last Visit: 04/18/13

Administrator
Dev
Joined: 06/19/03
Forum Posts: 5018
 Re: Malware notification regarding http://ankarahh
 Posted on: 10/29/11 at 11:11:17

Maybe its time to move to dreamhost.com ?

As far as I know dreamhost is the only serious host out there running on Perl itself. Which is also good for us in developing the script.

This is very important because they are many incompetent hosts out there which are clueless about Perl and will not understand the process it runs when they are self being hacked!

Something else, will strongly recommend you using WinSCP and SFTP for accessing your ftp server. Seems like hackers are mass sniffing entire networks these days for usernames and passwords. SFTP is the only way to secure your server...

On



[user:On]
on@web-app.net

GC/CS/E/H/IT/L/M/MU/PA/P/S/SS/TW/O d(+++)>+ s: a+>++>+++$ C++++$ UBAHS*++++$ P+++++(--)$ L !E? W+>++ N+++@ K+++>++++++@ w$ !O M->+ V--() PS+(-) PE(++) Y+ PGP->+ t+() 5 X? R>* tv@ b++>+++ DI+++ D? G(-) e++>+++@ h----() r+++ y++++ (Words of wisdom from Larry Wall, 1993)
Logged
       
offline gspot
Last Visit: 12/12/11

Moderator
Dev
Joined: 04/22/08
Forum Posts: 327
 Re: Malware notification regarding http://ankarahh
 Posted on: 11/08/11 at 15:42:34

could be On...however, first of all I should get rid of the warning page instead of the  
webpage itself, something wrong with the config I think....any suggestions? can you
help me with this issue...after that we can upgrade to a higher version or so...I am
easy to delete all the content, I have already deleted all the index (html) files for
the galleries including all the photos...thanks...G*



ankaraHHH.com
On On
G*
Logged
       
offline On
Last Visit: 04/18/13

Administrator
Dev
Joined: 06/19/03
Forum Posts: 5018
 Re: Malware notification regarding http://ankarahh
 Posted on: 12/11/11 at 19:53:44

The best way to find out how you were hacked?  

One way your host should help you is by looking into the logs, or running a simple unix command to get a list of the latest modified files.

From what it looks like, someone has uploaded vicious files to your server! I have no clue how he/she managed to that since webapp does not allow anyone uploading such files whatever!

It is more likely that someone sniffed your server password and pushed the file in.

Next version?
I cannot answer that either, I promised Jack several times now to send him a zipped version of my work - and yes I continued working since whatever on daily basis on a new version! Never stopped...  You can get a main idea of what I am working on here:

http://valg.morsmal.org... external link  and http://www.morsmal.org... external link  Though it may not look so different than the existing version - this version contains a unique multilingual platform which generates translations for a given site upon demand...  and in an semi automated way! (both human and machine interacts in this translation as you may try it your self on the morsmal.org site above!).

As far as I know of, there is no other Perl module or ANY CMS out there doing the (new) translational routines of babel, bing and google...  so I guess, we would be first to release that!



[user:On]
on@web-app.net

GC/CS/E/H/IT/L/M/MU/PA/P/S/SS/TW/O d(+++)>+ s: a+>++>+++$ C++++$ UBAHS*++++$ P+++++(--)$ L !E? W+>++ N+++@ K+++>++++++@ w$ !O M->+ V--() PS+(-) PE(++) Y+ PGP->+ t+() 5 X? R>* tv@ b++>+++ DI+++ D? G(-) e++>+++@ h----() r+++ y++++ (Words of wisdom from Larry Wall, 1993)
Logged
       
offline gspot
Last Visit: 12/12/11

Moderator
Dev
Joined: 04/22/08
Forum Posts: 327
 Re: Malware notification regarding http://ankarahh
 Posted on: 12/12/11 at 00:27:46

as I mentioned before, I just want to get working the web site...I have deleted almost everything...I can NOT access the logs, and it is irrelevant to find out why and how the site was hacked...I just want to know where the config file is and start to show the site...if you want we can upgrade it to your new version, I may give you the details regarding FTP accessing etc...so can you manage it, yess? let me know G*



ankaraHHH.com
On On
G*
Logged
       

  Malware notification regarding http://ankarahhh.co
  Support
  Forums
  
Pages: [1]
Hop to: