Need Help "Client Website Displaying Pornographic Advertisement"

[consgols]

---

mga brad dugay nako nag problema ani

"Concern is the Blackhole Toolkit Website 3.1 attack (caught by our Norton Antivirus program) that occurs, displaying a pornographic advertisement when we visit a variety of pages (from over 5 separate computers) on our site, especially when selecting Express Enrollment – Training."

pero ang client ra ang maka encounter ani aborad... help please...

[Syd_M]

mga brad dugay nako nag problema ani

"Concern is the Blackhole Toolkit Website 3.1 attack (caught by our Norton Antivirus program) that occurs, displaying a pornographic advertisement when we visit a variety of pages (from over 5 separate computers) on our site, especially when selecting Express Enrollment – Training."

pero ang client ra ang maka encounter ani aborad... help please...

Is that a Wordpress site? Best thing to do would be to re-install Wordpress (re-create a clean copy of the site, delete the old site, copy over the new copy). You could also try using the Wordpress Exploit Scanner and Timthumb Vulnerability Scanner to scan for infections. Note that those plugins only detect, the don't remove the infection. You'll need to get rid of the infection manually.

[consgols]

is it possible the problem is their server?

[Syd_M]

is it possible the problem is their server?

From what I found out regarding this kind of attack this happens when a website is infected by an attacker injecting malicious code into the site pages, usually via an unsecured comment form or similar. If you do a code review of the infected pages, you may notice some obfuscated code in the source code of the site. That's usually a good indication that the site has been compromised.

[slimer_]

Content Management Sites? mao ni dli ko mo buhat ingani na sites. if naa problema, mura ka hilantan. Its better to code it from scratch.

[jameswadebosh]

Content Management Sites? mao ni dli ko mo buhat ingani na sites. if naa problema, mura ka hilantan. Its better to code it from scratch.

Naa sad ka point du... Pero not all clients man sad gusto ug from scratch; some clients would want specific CMS.

[vi3wts!ck]

ug diri ang gamit sa pag hire og system penetrator.

[noy.juan]

Content Management Sites? mao ni dli ko mo buhat ingani na sites. if naa problema, mura ka hilantan. Its better to code it from scratch.

seriously... im on your side... i prefer old school way of creating a site...

depende sa developer before you start, educate your client on pros and cons about using a open source system... now let him choose between a site from scratch or site using openly sourced system...

i only use wordpress if necessary other than that i just create a framework from scratch that i can use over and over again...

and also... most wordpress infection are result of using illegally obtain premium templates/plugins, and sometimes even free themes are rigged with malware...

- - - Updated - - -

ug diri ang gamit sa pag hire og system penetrator.

a developer should be at least knowledgeable on pentesting... on my case i do weekly and sometimes random pentesting on our site and also our local network....


btw, look or this codes

base64 

and

exec 

[skeptic_rob]

delikado ka anha cyber crime bro

[jackdi]

mga brad dugay nako nag problema ani

"Concern is the Blackhole Toolkit Website 3.1 attack (caught by our Norton Antivirus program) that occurs, displaying a pornographic advertisement when we visit a variety of pages (from over 5 separate computers) on our site, especially when selecting Express Enrollment – Training."

pero ang client ra ang maka encounter ani aborad... help please...

Master.... try daw anang WordFence, basin makatabang na nimo.
Naa man god sa plugins sa wordpress gud:

http://wordpress.org/plugins/wordfence/

Or try sa >>> www•wordfence•com