Help removing exploits from Host

cd34 · 2006-12-09, 02:10 AM

change your FTP password. This exploit comes in through an FTP session which logs in, grabs the current file, changes it, puts the file within seconds. Obviously automated, but, that particular string is always updated via FTP.

xsiteu · 2006-12-09, 06:51 AM

Thanks CD34

I immediately went in to change my FTP accounts and discovered to my amazement that anonymous FTP was enabled on this particular domain. No idea how or why.

I removed that and changed all the account passwords to be sure. I have now removed the malicious code again. Time will tell but I am confident that you have identified the problems.

2006-12-09, 02:10 AM	#1
cd34 a.k.a. Sparky Join Date: Sep 2004 Location: West Palm Beach, FL, USA Posts: 2,396	change your FTP password. This exploit comes in through an FTP session which logs in, grabs the current file, changes it, puts the file within seconds. Obviously automated, but, that particular string is always updated via FTP. __________________ SnapReplay.com a different way to share photos - iPhone & Android

2006-12-09, 06:51 AM	#2
xsiteu WHO IS FONZY!?! Don't they teach you anything at school? Join Date: Feb 2004 Location: Cyberspace Posts: 40	FTP accounts modified Thanks CD34 I immediately went in to change my FTP accounts and discovered to my amazement that anonymous FTP was enabled on this particular domain. No idea how or why. I removed that and changed all the account passwords to be sure. I have now removed the malicious code again. Time will tell but I am confident that you have identified the problems. __________________ <a href=http://www.xsiteu.com>XsiteU Adult Links</A> <a href=http://www.honeybabes.net>Honeybabes TGP</A> <a href=http://www.cumfacts.com>CUM fACTS</A>