-
☆ A M B ☆
- 711 Posts
That’s not good at all, I have heard they are blaming wordpress but all sorts of sites are being hacked multiple times.
A Godaddy user contacted me yesterday his MODx files were hacked / changed and information was added into the database as well.
Its probably best you also check your database content as well.
Aaron
-
☆ A M B ☆
- 24,524 Posts
Apparently a self-deleting script is being uploaded/inserted onto servers that adds the code to all .php files it can write to, then removes itself. So it’s only by pure luck somebody stumbled across one of these files before it activated and deleted itself.
This has nothing at all to do with the security or lack thereof of the effected applications; it’s definitely a hosting/server security issue.
If these scripts are being inserted and run with root privileges, there is very little that can be done to stop them.
I came across this site in response to reading this thread. I am not sure if it may be helpful to others. Advertised as a cleaner for this infection but does not prevent reinfection. I hope that it is alright to post this. If not, please just delete it out.
http://www.danielansari.com/wordpress/2010/05/holasionwebcom/
"Remember what Bilbo used to say: It's a dangerous business, Frodo, going out your door. You step onto the road, and if you don't keep your feet, there's no knowing where you might be swept off to."
-J.R.R. Tolkien from The Lord of the Rings
at Aaron: Thanks!!!... I will follow your suggestion and instructions, just to make sure it is all clean.
at Everyone:
Thank you for your suggestions and tips to remove the virus!, again, I am really disappointed of GoDaddy’s support. And like you guys suggested, I am moving away from this company. A user kindly sent me an email suggesting a hosting service. But I was thinking on perhaps paying for perhaps a virtual server to host MODx at Media Temple.
