Data Realms Fan Forums http://forums.datarealms.com/ |
|
DataRealms Website Malware Warning http://forums.datarealms.com/viewtopic.php?f=48&t=31195 |
Page 3 of 3 |
Author: | Daman [ Wed Jun 27, 2012 11:06 am ] |
Post subject: | Re: DataRealms Website Malware Warning |
Did you actually find the breach? Did you grep -ri "base64_decode" . ? Check to see if it was done via SQL injection by grep -i the logs for "OUTFILE" / "DUMPFILE", alternatively "EXEC", alternatively http://code.google.com/p/apache-scalp/ , alternatively take the professional route and install an intrusion detection system |
Author: | scancode [ Wed Jun 27, 2012 4:58 pm ] |
Post subject: | Re: DataRealms Website Malware Warning |
It was way less exciting than that. FTP password was compromised. All relevant passwords were changed and computers are being scanned for malware. I did check the rest of the site for base64'd content, iframes, and external scripts. Everything seems to be clean. I guess I *could* install an IPS, but that's up to the serverguys. |
Author: | Data [ Thu Jun 28, 2012 9:46 am ] |
Post subject: | Re: DataRealms Website Malware Warning |
yet again, scannie saves the day! thanks dude |
Author: | Azakan [ Thu Jun 28, 2012 7:12 pm ] |
Post subject: | Re: DataRealms Website Malware Warning |
Scancode is indeed worthy of a imaginary statue for his heroic deeds. Also I guess the extreme slowness of the forums are gone now? |
Author: | Harzipan [ Thu Jun 28, 2012 7:24 pm ] |
Post subject: | Re: DataRealms Website Malware Warning |
It's been gone for awhile. At least for me. |
Author: | Natti [ Thu Jun 28, 2012 8:23 pm ] |
Post subject: | Re: DataRealms Website Malware Warning |
Harzipan wrote: It's been gone for awhile. At least for me. |
Author: | Azakan [ Thu Jun 28, 2012 9:10 pm ] |
Post subject: | Re: DataRealms Website Malware Warning |
I meant like, FOREVER! But yeah, I havent notised it either but it used to come and go. |
Page 3 of 3 | All times are UTC [ DST ] |
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |