AWAS: Exploit Terbaru Impact Website!
Kali ni saya nak berbahasa inggeris pulak.. Haha, jangan takut. Bukan saya nak tambah atau nak jadikan blog ini di dalam bahasa inggeris, cuma artikel kali ini adalah dalam bahasa inggeris yang ditulis oleh seorang orang kita juga. Tapi dalam BI lah. So hari ni mari kita membaca dalam bi pula, hehe..
Tulisan ringkas ini bukan artikel, tetapi satu informasi yang amat penting juga untuk anda semua ambil serius terutama kepada webmaster, lebih-lebih lagi anda melakukan perniagaan internet atau program adsense.
Selamat membaca dan memahami. 
In my previous post I mentioned about my internet income drop by 50% and I am searching for the caused of it. Yesterday I found out what was the CULPRIT.
Here is the culprit:
Note: This code is very dangerous … my pc hang when I put the actual code in my BLOG. So I need to screen capture it to show you the actual script. This is really very dangerous. WARNING!
Somehow the above IFRAME script was inserted by UNKNOWN (hacker) to each and every my website that I haved about 20++ website. This script is inserted into all my web files that have *.htm, *.html & *.php.
What this script do is when someone opened my website it will push a trojan into the user machine and the trojan will be on the user pc. This will cause IE to hang and PC to reboot.
I checked on the NET and found out several web masters also been EXPLOITED by this Trojan. The damage that I faced people do NOT want to visit my site and my loyal customer also afraid to visit my site. I mentioned this to the HOSTING provider and the provider asked to erased all my website do the reload again.
If you guys hosted your web on HOSTGATOR please check all your *.htm, *.html, & *.php whether the IFRAME as above is in your web files.
The only way to clean it is to delete the above file one by one. Like what I did yesterday … I manage to clean up 2 out of 20++ website. The two website is about 300 pages each site…. IT IS REALLY A LOT OF WORK…
I am IN PAIN and LOST A LOT OF DOLLARS … but life need to go on ….I believe there will always a BLESSING in DISGUISE.
Take care and regards,
Zahir
http://invpath.blogspot.com/
hmm.. pergi visit his blog then go to rahsiaadsense.com terkena plak ngan exploit tu. habis hang pc. trojan tu tak tau ler ada ke idak. antivirus dah le expired. heheh
as’kum.
akak pun ada terjumpa web ni bila buat kajian tentang problem spyware di komputer akak. Apa-apa pun, kena selalu beringat untuk buat back-up dan update maklumat tentang ancaman2 terkini.
keep up the good work!
haha.. ye ker? Erkk, maybe saya terpaksa close dulu link ke blog Zahir tu.. Sy masuk no prob pun. Pastikan antivirus tu kuat + updated..
rasanya dia dah clean most of the pages. ada le few yg tak ter clean. kalo nak try jugak, hehehe.. yg kena tu kat page utk add our page to the list dalam rahsiaadsense.com tu
Zul & Azwan,
Web RahsiaAdsense tu dah saya clean dan bersihkan. Exploit dalam tu I dah remove dan access pasword dah tukar to avoid orang lain hack.
No problem Zul. Close link pun tak pe.
Cheers
Zahir
Ermm, ok. Kalau dah clean takperlah. Sy letak balik.. Credit.
zahir, cmne orang tu dapat tukar your html files? dia hacked the server ke?
kalo nak clean guna dreamweaver – ada search and replace all files in site feature.
The problem is dia hack one of the server dekat Hostgator and all website yg ada dalam share hosting tu dia tukar and put in the file. Kebetulan my website dalam server yg kena hack tu. Nasib betul. The hacker is from Brazil beli dia orang trace.
I cakap dengan hostgator tak kan lah hostgator takde protection. Dia org pun geleng kepala.
Other hosting ok la setakat ni …coz I ade host kat Singapore, Kat Bulgaria, kat Malaysia dan Kat Us campur2 takut kalau satu tempat semua rosak…
Macam tu lah cerite dia …
Salam Sejahtera……saya ridzuan.Saya ingin mempelajari tentang teknik2 membuat blog ada sesiapa yang sudi mengajar.kalau upah orang buat kosnya berapa?
Salam Sejahtera……saya ridzuan.Saya ingin mempelajari tentang teknik2 membuat blog ada sesiapa yang sudi mengajar.kalau upah orang buat kosnya berapa?
try it….
http://troybank.com//index.php?affid=165147