*Attention All Link List Owners, I Need Your Help*
 

This might be a little long but please try to bear with me because I need some help. Ok so the past 6 months Ive been really busy with my day job and have not been working on any of my sites nor have I submitted any freesites. I recently have some time to start up again and I went to check on my sites for the first time in a long time and found out my sites were installing some kind of trojan. I DID NOT DO THIS. I have no idea what happened. I went into my server to check the html files and saw that somehow or someone was getting into my server and putting this trojan code on my main pages and a couple of my freesites. I contacted Webair and the only explaination they could give me was it was probably on outdated script, which sounded logical because I was running Remote Thumbs script that i think needed to be updated but i never did because I havent been working online. So I got everything reuploaded and fixed but I had a feeling I would probably blacklisted. I went to check this site http://bl.usefulscripts.com/blocked/ and I was right. Both of my domains have been blacklisted. I tried to use the appeal feature but I never heard back from the webmaster that put me on the list. So this post is to get the attention of that webmaster or anyone else that can help me with this situation.

My domains are www.koochieking.com and www.pornokingpin.com so if I am on your blacklist please let me know.

I am an honest webmaster and not a cheater, somebody cheated me and fucked me in this situation. So if any linklist owners can help me out please let me know because I would like to start submitting again.

Sorry again for the long ass post.

Thanks,
TinCan.

*Attention All Link List Owners, I Need Your Help*
 

Sorry about posting this in this section but I posted this in the Link Lists & Getting Listed section but no one has responded so i figured id post it here.

This might be a little long but please try to bear with me because I need some help. Ok so the past 6 months Ive been really busy with my day job and have not been working on any of my sites nor have I submitted any freesites. I recently have some time to start up again and I went to check on my sites for the first time in a long time and found out my sites were installing some kind of trojan. I DID NOT DO THIS. I have no idea what happened. I went into my server to check the html files and saw that somehow or someone was getting into my server and putting this trojan code on my main pages and a couple of my freesites. I contacted Webair and the only explaination they could give me was it was probably on outdated script, which sounded logical because I was running Remote Thumbs script that i think needed to be updated but i never did because I havent been working online. So I got everything reuploaded and fixed but I had a feeling I would probably blacklisted. I went to check this site http://bl.usefulscripts.com/blocked/ and I was right. Both of my domains have been blacklisted. I tried to use the appeal feature but I never heard back from the webmaster that put me on the list. So this post is to get the attention of that webmaster or anyone else that can help me with this situation.

My domains are www.koochieking.com and www.pornokingpin.com so if I am on your blacklist please let me know.

I am an honest webmaster and not a cheater, somebody cheated me and fucked me in this situation. So if any linklist owners can help me out please let me know because I would like to start submitting again.

Sorry again for the long ass post.

Thanks,
TinCan.

From usefulscripts:
Inactive koochieking.com Reason: 404 after listing
Active koochieking.com Reason: Counter Rule

I am not hooked into that blacklist (though I do occasionally refer to it), but...you've now been banned there TWICE - and neither reason has anything to do with Trojans. Your other domain isn't on that blacklist.

I don't understand why you felt it was necessary to repeat this thread on the main forum. You obviously do this as a hobby, so don't expect every link list owner to drop what they're doing and run to your aid.

Ok this is why im confused because I dont use any counters AT ALL. The only problem im having is this trojan problem. And also my other domain IS on the blacklist for Counter Rule, but again i dont use any counters at all. And it doesnt matter if im doing this as a hobby because if u were in my shoes u would feel the way i feel and do the same thing i am doing because right now im stuck and have no clue what to do. Im just a lowlie newbie and not an expert like u apparently.

I don't know if I put you on there or not, but I do know that my rule of thumb is that if a domain is on there twice, there is no 3rd chance.

Oh man lets see :( the other domain pornokingpin.com was for a counter rule and there were counters not trojans

I know it is for the counter rule but thats the thing, I use no counters whatsoever. And if there were it was not my doing because i have not touched my sites for months.

I think this is totally unfair because I have done nothing wrong. For the first banning it was my fault for the 404 because I changed hosts and I did it wrong, but for this recent banning was not me. I have no clue what happened. The only proof I have is the transcript from when I contacted Webair about this. Other than that I have no clue what is happening to my sites or why it says I have counters when I dont use counters at all.

Don't be surprised noone wants to list you if even you don't have control over your stuff...


PS. I remember your sites being submited to my LL (however I dont have any in my database so most likely they were just dropped due to server downtime) so I accepted your latest site. But please note once I find something fishy about your sites you will get permanently banned

Is it possible that the trojans hat were on your pages were in the form of or disguised as a counter?

Ok here is the code that was on your pages now it was not loading a trojan but only a cookie now I have seen trojans before but never ones that just loaded a cookie and thats the normal thing a counter does.

That was most likely a result of the hacking. Traffloads.info is owned by some Russian cocksucker.

http://www.google.com/search?hl=en&l...FLOADS.INFO%22

This is exactly what I think the case is, but I promise u I didnt put it there. I didnt submit nor work on my sites for months and when i started again recently I found out that this code was on my index pages and on some of my freesites. This is the transcript from me contacting Webair support.

Thursday, June 29, 2006 4:42:31 PM (6/29/2006 8:42:31 PM - GMT)

Powered by SightMax.

Welcome to Webair, Alex will be right with you.

Alex:
hello, how may i help you?

TinCan:
hi

TinCan:
i was wondering if someone hacked into my server and installed a trojan on a couple of my domains

TinCan:
because i havent been on my sites for a couple months up until a couple of days ago, and when i got on both of them, both of the websites tried to install a trojan onto my computer

TinCan:
so i went in to check the html for the index pages and both of them had an IFrame code that i did not put on there

TinCan:
are u understanding what im saying?

TinCan:
also one of them has a javascript code that i also did not put on there

Alex:
got disconnected

TinCan:
oh ok

TinCan:
i was wondering if someone hacked into my server and installed a trojan on a couple of my domains

Alex:
whats the sites?

TinCan:
www.pornokingpin.com

TinCan:
www.koochieking.com


TinCan:
the sites are pretty plain so the codes were easy to spot

TinCan:
and i know for sure i didnt put them on there because i havent worked on my sites for months now

Alex:
ok. let me check that

Alex:
one sec

TinCan:
ok

Alex:
which file was changed?

TinCan:
both index files

TinCan:
for the main page

TinCan:
the code is at the botton

TinCan:
outside the tag

TinCan:
i mean outside the tag

Alex:
i se the iframe

Alex:
looks like the file was changed today 29th

TinCan:
today?

TinCan:
well i found out about this a couple days ago

TinCan:
i mean the trojan tried to install on my computer a couple days ago

TinCan:
but i didnt check the html codes till today

TinCan:
i didnt change anything on it, all i did was download to view the source

Alex:
hmm i am not gettign any poopups fromyour page

TinCan:
its not a popup

TinCan:
my antivirus popped up and told me that a trojan was attempting to enter my computer

TinCan:
either way the codes are there without my knowledge

TinCan:
juust trying to figure out whats goin on and how it got there, and hoping it doesnt happen again

TinCan:
i dont have much traffic but it dropped by half in the past 2 months, i didnt pay it any mind but now im thinkin thats the reason why

Alex:
i sugeest either reuploading the site or deleting the code - the server itself is not compromized

TinCan:
ok i was guessing that was what i was supposed to do

TinCan:
any suggestions on how to prevent this?

Alex:
do you have any scripts installed?

Alex:
you might want to update them

Alex:
thats usually the issue

TinCan:
yea koochieking.com is running on a script

TinCan:
but pornokingpin.com isnt

Alex:
update the script, reupload index files, if the problem repeates - make a ticket on to support@webair.com

TinCan:
ok will do

TinCan:
thanks for the hrlp

TinCan:
help

Alex:
no problem, i wish i had a more exact answer to your problem

TinCan:
well your explanation sounds logical, cuz i do remember the script im running needed to be updated

TinCan:
but i havent worked on my sites on months so i havent done that yet

TinCan:
ok well thanks again

TinCan:
ill be in touch if i need more help

Visitor TinCan has ended the chat

Yes it is someone hacking because I know it was not me that put the codes there. And also im not Russian, im just a Vietnamese guy living in Houston, Texas.

Why do so many Vietnamese live in Texas? I never understood that. I have two half-Vietnamese cousins and they were raised in Texas even though they weren't born there. Just one of those things one ponders.

BTW, I was once on a hacked server and Apache was injecting all kinds of fun shit (Trojans) on my pages. Luckily, I noticed it the first day and jumped to another host immediately. Though moving hosts probably wouldn't have helped you since it was your site hacked and not the server itself.

Ok TinCan we will lift the banns on the domains but if there another problem of any kind at all its banned for life its not the LL owners problem if you get hacked its yours so I got to say there will be no more chances.

Ok thanks alot Mr Mary Lou.

LOL i dont really know why there are so many Viets in TX, Ive always wondered that myself. But yea especially in Houston theres a big Vietnamese population here.

Probably since LBJ signed the civil rights act he had to find replacements for working the back 40.. since Vietnam was escalating at that time, Ladybird brought them in to work in her factories.. from there it just grew.

I don't know what you are up to, but my bot noticed that my recip was gone and page was changed.

Cached snapshot: http://66.249.93.104/search?sourceid...entrances.html
What it looks like now: http://www.koochieking.com/freesites...entrances.html

Me no likey.

Sorry dude I never meant for any of this to happen, after I found out that Ive been hacked Ive been re uploading everything back onto my server and I must have fucked up somewhere. I will get this fixed as soon as possible.

Most certainly.

Sorry man, I truly am, u can go ahead and pull the freesite or any other freesite that i fucked up on. Again I am very sorry.

Woe is me why why why |banghead| |banghead| |banghead|

SOrry Mr Mary Lou, and sorry to everyone else all the trouble I have caused, Im trying my best to get everything straightened out and making sure none of this trojan is left on any of my pages. Its been totally fucked up the past month and im going pretty crazy myself over here. Again sorry for all the trouble i caused.