1. Welcome to DNTrade. If you want to find out about the latest domain name industry news or talk, share, learn, buy, sell, trade or develop domain names - then you've come to the right place. It's a diverse and active community, with domain investors, web developers and online marketers - and it's free! Click here to join now.
    Dismiss Notice

Hi, We're new here!

Discussion in 'Introductions' started by All IT Solutions, Feb 28, 2012.

  1. All IT Solutions

    All IT Solutions Membership: Community

    Joined:
    Feb 27, 2012
    Messages:
    10
    Likes Received:
    0
    Hi guys,

    We're new here and thought we better start by saying hello. We're an IT support and solutions company here in the ACT and we're all about the right providing great support and service.

    We've actually already started a new series of threads which is about giving other small businesses some help with regards to their computer systems. We got our first post here:
    http://www.dntrade.com.au/all-tip-1-removing-malare-t4724.html?p=33017

    I hope you all find them useful and can benefit from them. Also feel free to see what we do on Facebook and follow us on Twitter.

    Speak to you all soon!

    allitsolutions.com.au
     
    Last edited by a moderator: Feb 28, 2012
  2. johno69

    johno69 Membership: VIP

    Joined:
    Nov 29, 2008
    Messages:
    2,663
    Likes Received:
    422
    auDA Member:
    Yes
    Welcome.
     
  3. Joel

    Joel Membership: Community

    Joined:
    Oct 26, 2011
    Messages:
    344
    Likes Received:
    74
    Welcome to DNT :)

    You may want to check out the security of your website - it's currently infected with the JS/Iframe.BQ trojan.
     
  4. Mark

    Mark Membership: VIP

    Joined:
    Nov 21, 2008
    Messages:
    730
    Likes Received:
    4
    Hello and welcome!
     
  5. All IT Solutions

    All IT Solutions Membership: Community

    Joined:
    Feb 27, 2012
    Messages:
    10
    Likes Received:
    0
    Thanks everyone.

    And thank you LEAP. Can you please tell me which program or site advisor gave you that trojan notifcation because we've run a host of different antimalware/site advisors over the site. Thanks
     
  6. All IT Solutions

    All IT Solutions Membership: Community

    Joined:
    Feb 27, 2012
    Messages:
    10
    Likes Received:
    0
    Oh, and I forgot to mention that they don't find anything :)
     
  7. Joel

    Joel Membership: Community

    Joined:
    Oct 26, 2011
    Messages:
    344
    Likes Received:
    74
    eset/nod.
     
  8. Joel

    Joel Membership: Community

    Joined:
    Oct 26, 2011
    Messages:
    344
    Likes Received:
    74
    I'm trying to visit your site again but I'm getting page not found. The IP 203.88.116.225 isn't resolving for me - I'll try it again later on to see if I can find out more information for you. isup.me reports your site is down for everyone.

    edit: looks to be back up now. The site is now clean - looks like WordPress has been upgraded :) Glad you got it fixed.
     
    Last edited: Mar 1, 2012
  9. All IT Solutions

    All IT Solutions Membership: Community

    Joined:
    Feb 27, 2012
    Messages:
    10
    Likes Received:
    0
    Thanks for all that.

    We've just installed Nod and it doesn't pick up anything and we just checked isup.me reports:
    It's just you. http://www.allitsolutions.com.au is up.

    hmmmm....
     
  10. All IT Solutions

    All IT Solutions Membership: Community

    Joined:
    Feb 27, 2012
    Messages:
    10
    Likes Received:
    0
    Oh...just noticed the edit. We didn't update WordPress unless it was the developer.

    Thanks for keeping your eye out.
     
  11. joe

    joe Membership: Community

    Joined:
    Jul 11, 2011
    Messages:
    203
    Likes Received:
    0
    sitecheck.sucuri.net didn't find anything but avast tells me it blocked a trojan when i visited your site.
     
  12. All IT Solutions

    All IT Solutions Membership: Community

    Joined:
    Feb 27, 2012
    Messages:
    10
    Likes Received:
    0
    ok...I've removed the infected file and it should be alright now. I suspect that it was an orphan file to a wordpress vulnerability which was thought to have been patched and removed a couple of weeks ago. Thank you very much.

    I suppose that it reinforces my comments made in the tips on antivirus that you do need to run a suite of programs to weed out all the little critters.
     
  13. FirstPageResults

    FirstPageResults Membership: VIP

    Joined:
    May 26, 2009
    Messages:
    1,906
    Likes Received:
    105
    auDA Member:
    Yes
    Avast! still gives me a warning
     
  14. Joel

    Joel Membership: Community

    Joined:
    Oct 26, 2011
    Messages:
    344
    Likes Received:
    74
    NOD is now giving the trojan alert again! Looks like the backdoor still exists.
     
  15. Joel

    Joel Membership: Community

    Joined:
    Oct 26, 2011
    Messages:
    344
    Likes Received:
    74
    I couldn't PM an attachment, so just posted it here. NOD won't let me visit the site so I don't have a screenshot of the site for you. I'll see if I can get to it another way and grab the source where the hack looks to be in place.
     

    Attached Files:

    • 3.jpg
      3.jpg
      File size:
      76.7 KB
      Views:
      8
  16. Joel

    Joel Membership: Community

    Joined:
    Oct 26, 2011
    Messages:
    344
    Likes Received:
    74
    As requested, image attached showing this afternoon in the log.
     

    Attached Files:

    • 4.jpg
      4.jpg
      File size:
      92.1 KB
      Views:
      7