Click to See Complete Forum and Search --> : trojans and viruses


OwenTheSamoan
06-22-2005, 11:39 AM
This subject is a bit off the normal topic of php and mysql but I have found phpbuilder.com to be very informative and helpful and I thought someone may be able to steer me in the right direction.
I have a website and I discoverd this morning that when the home page is brought up there is a trojan that is attached to it that is attempting to download a virus into my computer. To my alarm I have found out that everyone evrywhere is experiencing the samething when they call up my site. I checked to see if anyone had hacked into my site and changed my homepage. No one had hacked in and the page seemed to be alright. I changed the whole HOME page to an earlier version and the problem disappeared.
My question is this---how is it possible for someone to attach a trojan to my website's homepage so that everyone on any computer is getting this trojan without hacking into my site?
Once again I apologze for posting this here since this is not necessarily a php topic.

Thanks in advance,
OwenTheSamoan

bradgrafelman
06-22-2005, 08:27 PM
Do you have any scripts that are displayed on the index, such as guestbooks, shoutboxes, etc.? Anything that someone can submit data to that is displayed?

Without examining your index file, I can't narrow down the problem very much.

If you'd like, I'd definitely take a look at it for you. If you decide to do this, make sure you post it as a TXT (text document) file ONLY. NO OTHER format please (just change the extension to .txt)!

dalecosp
06-23-2005, 12:56 PM
Originally posted by OwenTheSamoan
My question is this---how is it possible for someone to attach a trojan to my website's homepage so that everyone on any computer is getting this trojan without hacking into my site?Well, one of the first things that comes to mind is ... if you can't compromise a site, compromise the box it's running on...

But this:I changed the whole HOME page to an earlier version and the problem disappeared. might deny my hypothesis any creedence....:queasy:

OwenTheSamoan
06-28-2005, 09:55 PM
No such scripts. I'm assuming the site was hacked into somehow. I havn't any problems since though.

Thanks!