Results 1 to 8 of 8
  1. #1

    Small site with security needs

    Hi,

    I am not that technically proficient so I have to resort to shared hosting solutions...I am currently with Bluehost.

    Problem: I have a small site with minimal needs in terms of storage and bandwidth, but the site is controversial and gets hacked and attacked a lot.

    I need a shared hosting provider which ranks higher than most in terms of security.

    Recently the site was attacked such that any user going to the site was infected with Trojan horse viruses.

    Donno if it's useful or not but here are the files from my PC antivirus which was infected when I went to the site with IE:


    File generated by Rogers Online Protection Anti-Virus

    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\PG8E0SM0\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:25 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\GC9JZWI3\gifimg[2].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:27 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\0QBPA1EL\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:27 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:28 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\EKTEAS82\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:28 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[4].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:29 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\IPGNWAB0\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:30 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\5VT8B104\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:21:30 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\43XUDX83\gifimg[2].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:21:31 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:18 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\0QBPA1EL\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:26 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\EKTEAS82\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:31 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[4].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:34 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\99Y08ASV\gifimg[3].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:42 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\MVCJC2AO\gifimg[2].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:46 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[4].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:22:49 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\FV313ILC\gifimg[4].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:52 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\GC9JZWI3\gifimg[2].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:56 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\DCJNVFXW\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:22:59 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:23:03 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\DCJNVFXW\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:06 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\NX4F177M\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:10 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\2WVYMTAZ\gifimg[3].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:14 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\IPGNWAB0\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:17 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\PG8E0SM0\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:23 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\GC9JZWI3\gifimg[2].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:28 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\NX4F177M\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:36 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\5VT8B104\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:23:41 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[4].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:24:32 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\HVDPJG98\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:24:38 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[4].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:24:40 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\2WVYMTAZ\gifimg[3].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:24:44 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\PG8E0SM0\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:24:48 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:24:52 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\99Y08ASV\gifimg[3].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:24:55 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:24:57 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\NX4F177M\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:25:00 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\5VT8B104\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:25:07 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\FV313ILC\gifimg[4].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:25:11 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\NX4F177M\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:25:14 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\0QBPA1EL\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 12:25:16 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\NX4F177M\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:25:18 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\HVDPJG98\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:25:30 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\MVCJC2AO\gifimg[2].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:25:34 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[5].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 12:25:39 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\2WVYMTAZ\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:43:45 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\2WVYMTAZ\gifimg[2].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:43:47 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\43XUDX83\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:45:02 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:45:49 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[2].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:45:50 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[3].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:45:50 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\6SLECSUQ\gifimg[4].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:45:51 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\99Y08ASV\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:01 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\99Y08ASV\gifimg[2].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:01 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\EKTEAS82\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:27 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\EKTEAS82\gifimg[2].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:28 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\EKTEAS82\gifimg[3].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:28 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\EKTEAS82\gifimg[4].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:29 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\FV313ILC\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:43 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\FV313ILC\gifimg[2].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:44 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\FV313ILC\gifimg[3].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:46 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\GC9JZWI3\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:46:52 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\LV7N3EEO\VIyY[1].swf Trojan-Downloader.SWF.Agent.bm
    Reported 11/5/2009 12:52:22 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\MVCJC2AO\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:52:31 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\N6NWDKMQ\lcU[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 12:53:06 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[1].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:53:40 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[2].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:53:40 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\gifimg[3].htm Trojan-Downloader.JS.Gumblar.x
    Quarantined 11/5/2009 12:53:41 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\No01r[1].swf Trojan-Downloader.SWF.Agent.bm
    Reported 11/5/2009 12:53:42 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\PXGN5B3C\S2am[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 12:54:32 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\PXGN5B3C\Y1MC[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 12:54:53 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\Q5TY7EJZ\f0hMy[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 12:55:18 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\U4C8MYPZ\xKF[1].swf Trojan-Downloader.SWF.Agent.bm
    Reported 11/5/2009 12:57:11 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\WZ1IITJQ\UMON[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 12:57:58 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\NX4F177M\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Deleted 11/5/2009 9:12:34 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\0QBPA1EL\gifimg[1].htm Trojan-Clicker.HTML.IFrame.amh
    Quarantined 11/5/2009 9:15:44 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\HVDPJG98\PHOTO[1].htm Trojan-Downloader.JS.Gumblar.x
    Deleted 11/5/2009 9:15:46 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\LV7N3EEO\VIyY[1].swf Trojan-Downloader.SWF.Agent.bm
    Reported 11/5/2009 10:00:42 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\N6NWDKMQ\lcU[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 10:01:16 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\P5098OY4\No01r[1].swf Trojan-Downloader.SWF.Agent.bm
    Reported 11/5/2009 10:01:45 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\PXGN5B3C\S2am[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 10:02:28 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\PXGN5B3C\Y1MC[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 10:02:48 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\Q5TY7EJZ\f0hMy[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 10:03:11 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\U4C8MYPZ\xKF[1].swf Trojan-Downloader.SWF.Agent.bm
    Reported 11/5/2009 10:04:58 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\WZ1IITJQ\UMON[1].swf Trojan-Downloader.SWF.Agent.bp
    Reported 11/5/2009 10:05:37 AM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\W1OY1IHN\Rapl[1].dat Trojan-Downloader.SWF.Agent.bu
    Deleted 11/6/2009 12:55:24 PM
    C:\Documents and Settings\user\Local Settings\Temporary Internet
    Files\Content.IE5\W1OY1IHN\GJj[1].dat Trojan-Downloader.SWF.Agent.bu Deleted
    11/6/2009 12:58:53 PM

  2. #2
    Join Date
    May 2006
    Location
    San Francisco
    Posts
    7,200
    Are you using a CMS like Joomla or Drupal?

  3. #3
    Nope nothing like that.

    Here is the site.. a very simple one, built with html and Frontpage:

    jdl-canada dot com

  4. #4
    Join Date
    Mar 2009
    Location
    India
    Posts
    1,233
    Use static html pages if you get too many injections

  5. #5
    Join Date
    Dec 2007
    Location
    Indiana, USA
    Posts
    16,087
    Are you sure that your files aren't being compromised via FTP? This is the most common form of attack that I've seen and it involves a computer infected with a trojan that has a FTP program that stores the server/username/password information.

    This information is sent "home" and then bots from a bot network log in, download index files - add malicious code to them - and then re-upload the files.
    Michael Denney - MDDHosting LLC
    New shared plans for 2016! Check them out!
    Highly Available Shared, Premium, Reseller, and VPS
    http://www.mddhosting.com/

  6. #6
    Could be .. all I can tell you is that I am the only person who has the ftp userid and password ... i use CuteFTP on my home PC and no one else has access to that PC.

    I have been told that changing hosting firms will be absolutely necessary now that my current hosting has been compromised. I want to find a really good secure hosting solution.

  7. #7
    Join Date
    Dec 2007
    Location
    Indiana, USA
    Posts
    16,087
    Quote Originally Posted by rban View Post
    Could be .. all I can tell you is that I am the only person who has the ftp userid and password ... i use CuteFTP on my home PC and no one else has access to that PC.

    I have been told that changing hosting firms will be absolutely necessary now that my current hosting has been compromised. I want to find a really good secure hosting solution.
    It depends on how it's being compromised - I'm willing to bet it's something specific to your account or your home PC otherwise everybody else on the server would have been compromised as well.

    Chances are this will follow you to another provider if it is the trojan I mentioned or another security issue with your site.
    Michael Denney - MDDHosting LLC
    New shared plans for 2016! Check them out!
    Highly Available Shared, Premium, Reseller, and VPS
    http://www.mddhosting.com/

  8. #8
    Join Date
    May 2006
    Location
    San Francisco
    Posts
    7,200
    If it's a static HTML site, then either the server you were hosted on was exploited or your account was broken into like MikeDVB suggested. Have you reported the iframe hack to your hosting company? They can check if it was just your account or if other accounts on the server also were exploited.

Similar Threads

  1. How to (small security script)
    By cannibal in forum Hosting Security and Technology
    Replies: 9
    Last Post: 09-01-2007, 05:18 PM
  2. Cardholder Information Security Program and the Small Merchant
    By grobe in forum Ecommerce Hosting & Discussion
    Replies: 2
    Last Post: 02-19-2006, 01:04 AM
  3. Replies: 12
    Last Post: 08-14-2002, 05:27 AM
  4. Free Hosting for small business/small personal site
    By Pentameter in forum Shared Hosting Offers
    Replies: 4
    Last Post: 03-16-2002, 05:22 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •