Joomla.it Forum
Joomla! 1.0.x (versione con supporto terminato) => Le voci di Joomla.it (solo per versione Joomla 1.0.x) => : gerale01 27 Dec 2007, 07:12:32
-
Scusatemi, non so se è il posto giusto dove postare il messaggio però ho bisogno di aiuto. Guardando l'html del mio sito ho trovato in fondo del codice non inserito da me, che ha dei link a delle pagine ***... si trova proprio in fondo ed è :
<u style="display: none"> (http://ingersoll.org/mypjg/her/bad/3/asphyxiation.html) (http://armstrong-smith.com/images/xpukx/her/bad/3/***.html) (http://satheeshguru.com/album/ykuxt/her/bad/3/autofellatio.html) (http://novat.com/calendar/locale/rhgnk/her/bad/3/rape-stories.html) (http://santateresadejesus.org/images/_vti_cnf/dsjdv/her/bad/3/mature-***.html) (http://premiumiv.com/images/newsletter/hgxgp/her/bad/3/fisting.html) (http://playballservices.com/PHP-Nuke/blocks/mngju/her/bad/3/hymen.html) (http://orchardhillsrx.com/compounding/graphics/dwkbv/her/bad/3/hardy-on.html) (http://klubhouse.org/Images/_notes/hrywz/her/bad/3/***.html) (http://mdaaweb.org/photos/_vti_cnf/pcjtl/her/bad/3/paraphilia.html) (http://getmymail.org/personal/puertavallarta05/fglzz/her/bad/3/dog-***.html) (http://aftereightmusic.net/photos/dec9th/npqmc/her/bad/3/peeing.html) (http://drunkbartender.com/bysni/her/bad/3/peeing.html) (http://ubiquistbc.com/about/images/mpimu/her/bad/3/reach-around.html) (http://razorbabyproductions.com/imgs/header/olfxh/her/bad/3/virginity.html) (http://ballyhooconcepts.net/farmers/images/xnnkb/her/bad/3/titties.html) (http://doodadsembroidery.com/images/_vti_cnf/ibyrv/her/bad/3/boob.html) (http://esmdeli.com/images/_notes/udvfp/her/bad/3/swinger.html) (http://edenafrica.org/img/.thumbs/ibjbx/her/bad/3/asshole.html) (http://jillkaiserphotography.com/images/web/vtsox/her/bad/3/hot-moms.html) (http://susanploughe.com/images/ibmqj/her/bad/3/lucky-pierre.html) (http://youonlyfilmtwice.com/ohf/res/mxzgb/her/bad/3/glans.html) (http://astrum-fitness.com/images/.thumbs/qhtui/her/bad/3/incest-***.html) (http://themeridianinstitute.com/_private/_vti_cnf/roqdh/her/bad/3/swinger.html) (http://frozenriverthemovie.com/Images/New/drhcq/her/bad/3/intercourse.html) (http://utmbookings.com/audio/roydavisjr/bcmrp/her/bad/3/autofellatio.html) (http://bostonaquariumsociety.org/images/00event/rfuyw/her/bad/3/copulate.html) (http://pcdoctor-community.com/pcdblog/wp-admin/hvfjv/her/bad/3/redhead.html) (http://dieselscafe.com/themes/Centrium-Shellz/ilulo/her/bad/3/hosiery.html) (http://opinionsforfree.com/wjtsx/her/bad/3/blow-job.html) (http://dazzlebits.com/resources/portfImgs/rxmit/her/bad/3/violent.html) (http://studiomystic.com/_templates/qduol/her/bad/3/jerking-off.html) (http://1stprioritypb.com/images/.thumbs/mwgyu/her/bad/3/smurfs.html) (http://farisauto.com/inventory/images/dtvnd/her/bad/3/zoo.html) (http://joanetcher.com/images/Animals/ymwmz/her/bad/3/dirty-sanchez.html) (http://cherylcary.com/.thumbs/ynrjw/her/bad/3/freak.html) (http://aatitlecompany.com/images/symsq/her/bad/3/fight.html) (http://calicorentals.com/images/_notes/nzquk/her/bad/3/priapism.html) (http://flynnmarketinggroup.com/html/_vti_cnf/pvbwr/her/bad/3/snow.html) (http://phototouch.us/contacts/_vti_cnf/tskzb/her/bad/3/afterglow.html) (http://micropackamericas.com/images/droplists/ojlmd/her/bad/3/foreplay.html) (http://hkbuaao.com/content/browser-images/dvqtd/her/bad/3/animal-***.html) (http://paradiseescapes.net/connections/puvun/her/bad/3/penetration.html) (http://titegroupbuyersclub.com/oyqnp/her/bad/3/zoo.html) (http://gionisdesign.com/assets/images/qfldb/her/bad/3/scrotum.html) (http://triangleblues.com/external_files/_notes/iyitc/her/bad/3/nooner.html) (http://carlisbineyministries.org/administrator/backups/mcjcf/her/bad/3/threesome.html) (http://2997fps.com/hzgoj/her/bad/3/titties.html) (http://atlantispoolplastering.com/images/_vti_cnf/tnllv/her/bad/3/harlot.html) (http://ferrinironworks.com/cgi-script/csGallery/nluyo/her/bad/3/uncut.html) (http://hedleyrocks.com/Gigs/spotlights519/qswpr/her/bad/3/fondle.html) (http://noahvision.org/lscsc/her/bad/3/zoo-***.html) (http://megahealthonline.com/shop26/download/vntzt/her/bad/3/fetish.html) (http://cecpower.net/img/.thumbs/tvonw/her/bad/3/spooning.html) (http://bestbusinessmove.com/renohomedoors/images/vcyjf/her/bad/3/stripper.html) (http://wwp-law.com/administrator/backups/bioks/her/bad/3/sperm.html) (http://farodevida.org/css/_notes/twoqh/her/bad/3/tossed-salad.html) (http://marjoriemasel.com/home_movies/ntybd/her/bad/3/anilingus.html) (http://doctorraisen.com/wedding/images/dmlvh/her/bad/3/lube.html) (http://baybrink.org/images/Gallery/nfdmz/her/bad/3/fondle.html) (http://kona-makaicondo.com/.thumbs/viokz/her/bad/3/buddy-booth.html) (http://connectionsnonprofit.org/index_files/_vti_cnf/hcwnn/her/bad/3/index.html) (http://ameriwoodcraft.com/img/yhsur/her/bad/3/swinger.html) (http://yetipashmina.com/img/.thumbs/fnqrl/her/bad/3/vagina.html) (http://holeshotltd.com/images/banners/mlxbb/her/bad/3/impotent.html) (http://kjaysauction.com/classes/AplosRTE/zdtmx/her/bad/3/beast-***.html) (http://achievian.com/Mambo4.5.1b/administrator/igcpg/her/bad/3/exhibit.html) (http://swoopesrealestate.com/images/fzfnn/her/bad/3/softcore.html) (http://ursularauh.com/Paintings/images/bwtjr/her/bad/3/shemales.html) (http://heresmytown.com/img/.thumbs/bghom/her/bad/3/biastophilia.html) (http://dnamdental.com/about/images/cflfr/her/bad/3/spank.html) (http://chefdean.com/wedding/album1/xhuhd/her/bad/3/breath-play.html) (http://allpetsmedical.com/jade/images/pyqzm/her/bad/3/blow-job.html) (http://web-casino-website.com/pllbk/her/bad/3/hot-moms.html) (http://jamiesjamminkaraoke.com/ambros/ambros23/rfjqi/her/bad/3/boob.html) (http://w19.us/rnptz/her/bad/3/teen.html) (http://cspecdetailing.com/makemoney/yvqzw/her/bad/3/beast-***.html) (http://byvanessa.com/honeymoon/images/slqcf/her/bad/3/wife.html) (http://therapypetsofcollier.org/.thumbs/lfjbt/her/bad/3/reach-around.html) (http://fitzpatrickgroup.us/xhhri/her/bad/3/kegel-exercises.html) (http://journeyn2life.com/wp-admin/import/mmibo/her/bad/3/transgendered.html) (http://liveinharmony.biz/img/_vti_cnf/bhlus/her/bad/3/bareback.html) (http://subseasystems.net/_borders/_vti_cnf/suhfh/her/bad/3/jerking-off.html) (http://randtrestoration.com/pics/buttons/drcik/her/bad/3/cunt.html) (http://jj-communications.com/images/_vti_cnf/zvffw/her/bad/3/tranny.html) (http://eliteglove.com/img/_vti_cnf/jdncb/her/bad/3/fluffer.html) (http://willmorelaw.com/images/ilygg/her/bad/3/angry.html) (http://tpa-benefits.com/images/OtherImages/orvgf/her/bad/3/semen.html) (http://aeolusinternational.com/ftp/bin/jhdnh/her/bad/3/foursome.html) (http://visionbusinesspros.com/AffNetwork/advertisers/dxtdf/her/bad/3/mature.html) (http://teldancommunications.com/images/lskws/her/bad/3/bisexual-***.html) (http://rockfordwaterjetcutting.com/img/_vti_cnf/gyvhu/her/bad/3/incest-***.html) (http://xpdenterprises.com/img/.thumbs/tglqn/her/bad/3/autofellatio.html) (http://ekrome.com/PHP-Nuke/modules/Forums/templates/subSilver/images/lang_english/777/48.html) (http://intlculturalstudies.com/testimonials/motor/Client%20Quotes/motor/1/21.html) (http://diputadoalfredodeleon.org/urngmaiz/cgi-bin/.thumbs/.***/youtube/27.html) (http://extramonies.com/computer/rants/backup/wp-content/themes/default/images/1234sdf/51.html) (http://jmvcontemporary.com/images/logos/thumbs/bin/35.html) (http://intlculturalstudies.com/testimonials/motor/Client%20Quotes/motor/1/17.html) (http://extramonies.com/computer/rants/backup/wp-content/themes/default/images/1234sdf/40.html) </body>
</html><!-- 1198735876 -->
Qualcuno ha qualche idea sul come toglierlo...
Grazie
----------------------------------------------------
Risposta: Degli Hacker mi avevano modificato il file index.php del template inserendomi una riga che richiamava gli indirizzi esterni. La riga in questione era la seguente:
echo eval(base64_decode("ZXZhbChiYXNlNjRfZGVjb2Rl="));?>
Spero che possa essere di aiuto a qualche altro sventurato.
P.S. Ho finalmente letto tutti i post della sicurezza e ho blindato il sito... fatelo
-
Prima dovresti capire chi l'ha messo ???
-
Mi viene da pensare ad un componente/modulo/mambot "fallato" ed infatti li sto controllando tutti, disinstallando quelli non più utilizzati. Quello che chiedevo era sapere se ci potesse essere qualche shortcut per velocizzare la ricerca dell'elemento incriminato senza scorrere tutti i codici. Ho trovato un altro post (utilissimo..) che riporta ad una pagina dove sono indicati i componenti da controllare per primi. Comunque grazie lo stesso... Solo un consiglio: pensate che mi convenga comunque denunciare il fatto alla polizia postale o è esagerato ???
-
Mi viene da pensare ad un componente/modulo/mambot "fallato" ed infatti li sto controllando tutti, disinstallando quelli non più utilizzati. Quello che chiedevo era sapere se ci potesse essere qualche shortcut per velocizzare la ricerca dell'elemento incriminato senza scorrere tutti i codici. Ho trovato un altro post (utilissimo..) che riporta ad una pagina dove sono indicati i componenti da controllare per primi. Comunque grazie lo stesso... Solo un consiglio: pensate che mi convenga comunque denunciare il fatto alla polizia postale o è esagerato ???
Per primo consiglio ti direi di tirare sù un back-up recente prima del fatto e cambiare tutte le pass. Per la denuncia dipende, sicuramente se si tratta di link illegali ci potrebbe stare.
-
Purtroppo non so a quando risalga il fatto (quindi il backup lo scarterei), io me ne sono accorto solo in questi giorni spulciando l'html del sito. Per quanto riguarda i link mi sembrano del tutto illegali (nel senso che si riferiscono a pagine non corrette su siti legali). Se vuoi dare uno sguardo anche te il sito è http://www.progress.it.