Maglaro ng mga libreng laro sa pagsusugal apk,Casino Joy login.REGISTER NOW GET FREE 888 PESOS REWARDS!

Resolved yaksox
(@yaksox)

10 years, 3 months ago

Hi,

I had a visitor to my blog tell me that they were unable to leave a comment because of some sort of ‘scan.it’ pop up ad. I did a web search and can’t find any simialr problems to this nor any mention of ‘scan.it’.

When I try test commenting I don’t have any problems but that might have to do with the difference between my IP and the visitor’s.

I’d say the most likely reason is there’s some virus on the visitor’s computer causing this but I want to be sure.

Is it possible someone from here could visit https://www.sunnybreaks.org/2014/12/18/country-music/ and leave a throw-away comment to tell me I’m not going crazy?

Viewing 8 replies - 1 through 8 (of 8 total)

leejosepho
(@leejosepho)

10 years, 3 months ago

No problem for me there.

Thread Starter yaksox
(@yaksox)

10 years, 3 months ago

Alright, thanks leejosepho. That’ll do me.

joe
(@grahamelovemackenzie)

10 years, 3 months ago

Tried posting twice and it took me to this link:

I’m in Japan by the way.

Moderator Jan Dembowski
(@jdembowski)

Forum Moderator and Brute Squad

10 years, 3 months ago

Redacted the link and @yaksox you are hacked.

You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html
https://blog.sucuri.net/2010/07/understanding-and-cleaning-the-pharma-hack-on-wordpress.html

Thread Starter yaksox
(@yaksox)

10 years, 3 months ago

Good grief! Thanks Jan & Graham. I guess I’ll get started this morning.

barnez
(@pidengmor)

10 years, 3 months ago

More info on the hack from Sucuri:

Malware entry: MW:HTA:7

Description: This attack uses the .htaccess file to redirect users to a site serving malware (or spam). In some cases, the index.php is also modified to do the redirection as well.

Links: https://blog.sucuri.net/2010/04/conditional-redirects-or-the-htaccess-malware.html

Thread Starter yaksox
(@yaksox)

10 years, 3 months ago

^ This is very interesting. About 8 months ago I noticed a sharp drop-off in referrals from Google. I’d come to the conclusion that something I had linked to (ie something harmless + intereting to me) did not meet the approval of what the big G considers link-spam. I read about something like that happening to meta-filter and thought that must have been what happened at my blog.

I guess not.

barnez
(@pidengmor)

10 years, 3 months ago

Could be linked ……

I’d take a full site backup, start by checking and removing any bad code from the .htaccess and index.php files, and then begin working through the resources @jan Dembowski links to. Once the site is clean, work on hardening the installation, installing a strong firewall and malware scanner. Ninja Firewall has two neat features called Real-time detection (File Guard) & File integrity monitoring (File Check) which are useful if you want to monitor the site for unauthorised changes. Could be useful once you’ve cleaned the site.

Good luck!