Author Topic: webaliser.net iframe?  (Read 5129 times)

0 Members and 1 Guest are viewing this topic.

May 20, 2009, 07:54:48 pm
Read 5129 times

magcube

  • Newbie

  • Offline
  • *

  • 1
Hello,

I found this site after trying to research a strange iframe code that has been inserted into some of my site's pages calling the domain webaliser.net in an iframe.

Does anyone know what exactly this does and how can I tell if I have it completely off of my server?   Is it just a matter of removing the iframe code from the compromised pages?  I can't seem to find any other infected files.


Thanks!

May 20, 2009, 08:15:46 pm
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
This particular one doesn't seem to do anything as bad as the gumblar/martuz one floating about, but I'd still recommend doing a complete restoration of the site from backup if possible as what I can find, indicates it modifies both the files, and the database.

Aswell of course, as changing any FTP/cPanel etc etc passwords.
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net