And the trojan/virus infection story continues...

[meissen]

One of our new members mentioned when they click on the Weekly Cruise Night Locator link that it takes them to an antivirus link. Sure enough, it did it to me too!

Then, while researching what would cause this, I noticed that the people talking about it were talking about Google redirecting them to the malware site when they clicked legitimate search results.

So, I went to Google and searched our site, clicked the link -- SON OF A *****! Got redirected to the malware site.

Needless to say, I figured it out and all should be back to normal. It also explains why our bandwidth usage has plummetted the past few months -- ever since April 11th when the site got hacked they must have had that file on there that was redirecting to the malware site.

[SoulTerror]

Good job!

[MP81]

for B!!!!

[BlackbirdWs6zzz]

Wow thats pretty dirty!

Glad your figuring this out!

One of our new members mentioned when they click on the Weekly Cruise Night Locator link that it takes them to an antivirus link. Sure enough, it did it to me too!

Then, while researching what would cause this, I noticed that the people talking about it were talking about Google redirecting them to the malware site when they clicked legitimate search results.

So, I went to Google and searched our site, clicked the link -- SON OF A *****! Got redirected to the malware site.

Needless to say, I figured it out and all should be back to normal. It also explains why our bandwidth usage has plummetted the past few months -- ever since April 11th when the site got hacked they must have had that file on there that was redirecting to the malware site.

[Phantom409]

For B

[meissen]

Wow thats pretty dirty!

Glad your figuring this out!

Yeah it was -- they had it set up so that every time someone clicked a link to MiFbody from a search engine, they'd get redirected to the malware site. They also had it set up so all 404's redirected to the malware site.

Needless to say, I'm going to purchase a new server tonight and start transferring over files to a better machine.

[BlackbirdWs6zzz]

Oh wow. I can't believe the even cracked your password for your server. And it's not even like they got in thru an application on the board either.

Thats like grabbing you by the BALLS. New server is costly isn't it??

Yeah it was -- they had it set up so that every time someone clicked a link to MiFbody from a search engine, they'd get redirected to the malware site. They also had it set up so all 404's redirected to the malware site.

Needless to say, I'm going to purchase a new server tonight and start transferring over files to a better machine.

[meissen]

Oh wow. I can't believe the even cracked your password for your server. And it's not even like they got in thru an application on the board either.

Thats like grabbing you by the BALLS. New server is costly isn't it??

Still trying to figure out exactly how they made it in, but with it being back in April it's hard to tell for sure. On 4/11, I got an e-mail that someone gained root access, but the hostname and IP address was blank -- and I've always seen it filled in when I or my server management team does an SSH into the server, so that right there should've been my red flag but I disregarded it.

Once they had SSH access, they could do whatever they wanted.

As for the new server -- yeah, it's a little more expensive... in comparison to what I'm paying now, it's only $15 more per month.... but it's also one sweet combo. Core2Quad, 8gb DDR, 750gb SATA hdd... No messing around.

[sman]

$15 more a month is pretty pricey, make sure you raise the donation goal on the main page to cover it. I noticed it hasn't been very full lately, we need to get our act together to help pay for this awesome site!

[meissen]

$15 more a month is pretty pricey, make sure you raise the donation goal on the main page to cover it. I noticed it hasn't been very full lately, we need to get our act together to help pay for this awesome site!

I pay $120 right now for a dual core 2.2ghz with 2gb of ram, so $135 for quad core 2.8ghz with 8gb ram is a steal. It's actually normally $175 per month but on sale locked at $135 if you sign up while it's on sale.

[BlackbirdWs6zzz]

Those are great prices for a server! What hosting company you go thru?

[meissen]

I go through whatever I find on webhostingtalk.com This one is Limespot I think it's called.

[meissen]

Limestonenetworks.com The Quad Core Q9300 with 8gb of ram (what I bought) is the fastest server they have

[MP81]

Dude, that's a bad ass server.

Still not like dual quad-core Xeons, but still, it's pretty damn good! It'll be just fine for what you'll use it for.