Website issues - Socoder

-=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- (c) WidthPadding Industries 1987 0\|600\|0 -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=- -=+=-
Socoder -> Off Topic -> Website issues
Sun, 07 Feb 2010, 16:25
dna	I have a serious question. I use a website that until recently, is having all of the pages redirected to some other site. The service provider told me/us that the server was NOT hacked and that the issue lies elsewhere. I told the person at : https://www.blogbox.co.uk/home. that every link chosen at our site is redirected to them and to stop it. Their only reply was: "The issues you are experiencing may be caused by a browser incompatibility, security setting, or the need to download the latest Flash Plug-in. Please execute the following steps to ensure that your system is optimally configured for use with Zazzle.com: 1) Use up-to-date versions of Zazzle supported browsers: Internet Explorer 7 and Firefox. a) PCs: Internet Explorer 7 & Firefox 3 (Using old versions of Firefox and Internet Explorer and can cause a variety of complications...and though IE8 is now a fully released version, users may experience compatibility problems until Zazzle has been updated to full compliance with IE's latest release) i) IE7 (Free Download): https://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=en&WT.srch=1 ii) Firefox (Free Download): https://www.mozilla.com/en-US/firefox/personal.html" which was not what I wanted. What should I do in this instance? -=-=- DNA
Sun, 07 Feb 2010, 16:39
JL235	You say 'I use a website', do you mean someone elses site or is this yours? I'm presuming it's yours in this post but this isn't clear to me. I presume the HTML/PHP/whatever on your site really has been altered? You've downloaded a copy and the links really have changed? If so then I'd reply back to your hosting provider again saying that it's content has been altered, that it wasn't you and no one else has access. That clearly someone else must have gained access. But tbh I don't think that will do anything. What you can do is... 1) Change your FTP and control panel passwords for your domain. Change all of them to something more secure. 2) Switch to a different hosting provider.
Sun, 07 Feb 2010, 17:10
dna	I work for a news site and we share the site. I do the graphics end of it, most of it, and they do that other thing service which has been in limbo for some time now. I have access since I have to post the images when requested. When you mentioned the the HTML/PHP/ was altered, would that be something that the service provider could repair? I emailed them and was told they could not do anything since the problem site was in the UK. I'm going to check what portions of the HTML that I can. The few links that I could check looked unaltered. *** But know the problem for me is getting to the site to login. -=-=- DNA
Sun, 07 Feb 2010, 18:19
JL235	Your service provider might be able to help you, some perform their own backups of users data incase the server fails (this happened to me recently). But you'd have to ask. If it's a news site, is the info stored in a DB? You might want to check there to see if the data has been changed. Do you (or the company you work for) have their own backup of the site?
Sun, 07 Feb 2010, 19:38
mindstorm8191	You might have already checked this, but you might also check for spyware on your own PC. Certain spyware programs will reroute your intended webpages "for you", to whatever sites they want you to see. If you need an antispyware app, I've used spybot search&destroy for a while now, I think their website is safer-networking.org -=-=- Vesuvius web game
Sun, 07 Feb 2010, 21:06
dna	@JL235: Yes there is a complete backup of the Hypertext, and there are other sites that were created just for such an emergency however, those sites do not have the content that is contained on cleoaward.20fr.com @mindstorm8191: You may be right. Since this issue came up I have contacted the east coast, of the US, and some of my friends do not have the problem I am having. So your Spyware issue may be the problem. Overall, I did reformat the drive. Dropping the partition and reinstalling windows XP SP2. After the first install of firefox, I went to the site and then it still happened. This caused me to think of there possibly being a problem on the service providers servers or, within the regional router. It is possible. I'll try spybot even though it looks like that may not fix it. Site Hijacking? Is there a thing? -=-=- DNA
Mon, 08 Feb 2010, 02:14
JL235	Is the link actually changed, or are the links the same but when you click on them you are always redicrected to their site? It might be the DNS to blame if it's the latter. Try opening command prompt and typing 'ipconfig /flushdns'. Then go online and find a free DNS to use (I believe Google have one) and then set it to be used in your IP/TCP settings (you can google how to do this online).
Mon, 08 Feb 2010, 09:15
dna	What does the command ipconfig /flushdns do?
Mon, 08 Feb 2010, 09:46
Jayenkai	Flushes your dns cache.. Your dns cache is a list of ip addy's against urls. so.. abc.com = 1.2.3.4 and so on. If something's hit your system, it might've broken all those numbers, so flushing the dns will reset everything, and then your pc will constantly look up those numbers online, as opposed to just reading the list. It'll keep track and rewrite the list as it goes, so it all works nice and neatly. -=-=- ''Load, Next List!''
Mon, 08 Feb 2010, 12:45
dna	I did it and it seems to be working again. It was Spooky there for a while for me. After notifying the east coast and after hearing that they were not having the same trouble. I never got around to installing Spybot S&D. I use ZoneAlarm and thought that it would prevent something like this. I have to check for conflicts between Spybot and Zonealarm. Spybot is not compatible with some of these. -=-=- DNA
Mon, 08 Feb 2010, 21:43
mindstorm8191	In my experience, different anti-spyware apps will find different spyware, there could be many more spyware programs on your PC than either spybot or zonealarm will find. But using them all would probably be over-kill. Oh well. I like spybot because its 100% free, and not inluenced by any desires to make money. But it may not be any better than zonealarm. Oh yeah, pybot shouldn't have any conflicts with zonealarm. Spybot runs only as a search application, there's no resident checker of any kind. -=-=- Vesuvius web game
Thu, 18 Feb 2010, 16:29
dna	It was fixed everyone. The site service provider informed us that it was a DNS hijack of a form. Thanks for the advice mindstorm. I'll try Spybot side by side with Zonealarm and avavst. Hopefully there will be no problems. -=-=- DNA
Fri, 19 Feb 2010, 08:30
flying_cucco	mindstorm8191 Spybot runs only as a search application, there's no resident checker of any kind. Not entirely true; Spybot S&D has resident "Teatimer" componant which prevents registry changes etc.
Tue, 23 Feb 2010, 10:33
dna	You're right Cucco. The TeaTimer conflicts with Zonealarm. Here it does at least. -=-=- DNA
Tue, 23 Feb 2010, 11:32
JL235	I'd recommend Microsoft Security Essentials instead of Avast. It's done very well in reviews and is seen to be fast, no-nonsense and very good at catching viruses.