The secure CMS.

Welcome to Geeklog, Anonymous Wednesday, October 09 2024 @ 08:34 pm EDT

Geeklog Forums

malware concerns on site

 New Topic  Post Reply
 09/01/10 07:41pm (Read 2,173 times)  

nan

Anonymous
worried
Google has identified my site as having a "possible 3rd party malware problem. So, what in the world do I do? Thanks for your help.
 Quote
 09/02/10 05:45am  
Status: offline

1000ideen

Forum User
Full Member
Registered: 08/04/03
Posts: 1298
Use Geeklog, it is a safe CMS.
 Quote
 09/02/10 07:28am  

nan

Anonymous
freakingout
Thanks for the tip but my site IS geeklog. Now what? thanks.
 Quote
 09/02/10 08:20am  
Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Is the anything unusual happening when you call up your site? JavaScript popups that shouldn't be there, redirects that shouldn't happen, your virus scanner alerting you - things like that?

There have also been cases where ad networks were infected - do you have any ads on the site?

Just speculating here, since without further information, it's hard to tell what the problem is.

bye, Dirk
 Quote
 09/02/10 09:12pm  

nan

Anonymous
confused
google will verify site that I have gotten malware off. I have downloaded a security checker for my computer and the hosting company has checked telling me someone had a software that stole passwords and compromised the site.

What I now need to do is go to the front page and put in a google html code. Where would I find the front page on geeklog I tried index.php but I did not see anything that looked like this:<html>
<head>
<meta name="google-site-verification" content="2" />
<title> My title </title>
</head>
<body>
page contents
</body>
</html>

So please tell me where to find that?

Thank you so much for your help.
Nvr

 Quote
 09/03/10 01:42am  
Status: offline

kobab

Forum User
Regular Poster
Registered: 02/22/10
Posts: 73
should be layout/yourtheme/header.thtml.
 Quote
 09/03/10 01:46am  

ironmax

Anonymous
Quote by: nan

google will verify site that I have gotten malware off. I have downloaded a security checker for my computer and the hosting company has checked telling me someone had a software that stole passwords and compromised the site.

What I now need to do is go to the front page and put in a google html code. Where would I find the front page on geeklog I tried index.php but I did not see anything that looked like this:<html>
<head>
<meta name="google-site-verification" content="2" />
<title> My title </title>
</head>
<body>
page contents
</body>
</html>

So please tell me where to find that?

Thank you so much for your help.
Nvr



Look in the /public_html/layout/your_theme_directory/header.thtml file. The contents of that file should look something like this.

Text Formatted Code

{doctype}
<html{lang_attribute}{xmlns}>
<head>
<title>{page_title_and_site_name}</title>
<meta http-equiv="Content-Script-Type" content="text/javascript"{xhtml}>
<meta http-equiv="Content-Style-Type" content="text/css"{xhtml}>
<!-- link rel="SHORTCUT ICON" href="{site_url}/favicon.ico" -->
<!-- <meta http-equiv="Pragma" content="no-cache"{xhtml}> -->
<link rel="stylesheet" type="text/css" href="{css_url}" title="{theme}"{xhtml}>
{feed_url}
{rel_links}
{plg_headercode}
{advanced_editor}
<!-- Load Common Javascript Libraries -->
<script type="text/javascript" src="{site_url}/javascript/common.js"></script>
</head>
<body dir="{direction}">
    <div class="header-navigation-container clearfix">
        <ul>
            {menu_elements}
        </ul>
    </div>
    <div class="header-logobg-container-inner">
        <a class="header-logo" href="{site_url}/" rel="home">
            <img src="{site_logo}" width="151" height="56" alt="{site_name}"{xhtml}>
        </a>
        <span class="header-slogan">{site_slogan}</span>
    </div>
    <table cellspacing="0" cellpadding="0" style="width:100%;">
        <tr>
            {left_blocks}
            <td class="story-container">
                <p class="header-welcomeanddate-text">
                    <b>{welcome_msg}</b><br{xhtml}>{datetime}
                </p>

                <!-- START OF CONTENT AREA -->
 


Place your code after the last meta tag and above the </head> tag

Michael
 Quote
 09/07/10 09:13am  
Status: offline

Habitual

Forum User
Chatty
Registered: 01/28/10
Posts: 54
Location:Yawnstown, Oh. USA
Hello:

VPS, or Shared host?
If files were edited and code added, ask the hosting company to check /var/log/messages for ftp access for your account from IPs other than yours.
Your site can be further reviewed for suspicious code at http://unmaskparasites.com/ and Denis' blog at blog.unmaskparasites.com/ contains a wealth of information on compromised sites.

Were HTML files modified? Gumblar
Was .htaccess file(s) modified? stolen ftp passwords or weak file permissions.

What is the domain name and I can have a look? I do this for a living.

"downloaded a security checker" is not very informative. Do you have an up-to-date Anti-Virus product from a well-known manufacturer for your home or primary computer?

If you still need additional help determining who/what compromised your site, I can help.
void dot recyclebin at gmail dot com
 Quote
 09/14/10 06:45am  
Status: offline

Aldous11

Forum User
Newbie
Registered: 09/14/10
Posts: 1
I think it can be applied.......... :chestslam: :chestslam: :chestslam:
[url=http://www.testkingsite.com/hp/HP2-T16.html]HP2-T16[/url]
[url=http://www.testkingsite.com/hp/HP0-J40.html]HP0-J40[/url]
 Quote
 New Topic  Post Reply
All times are EDT. The time is now 08:34 pm.
  • Normal Topic
  • Sticky Topic
  • Locked Topic
  • New Post
  • Sticky Topic W/ New Post
  • Locked Topic W/ New Post
  •  View Anonymous Posts
  •  Able to post
  •  Filtered HTML Allowed
  •  Censored Content