fremmed kode - har jeg blitt utsatt for virus?

[HulkHaugen]

åpnet opp kildekoden min via nettleseren i dag fordi jeg tenkte å ta en oppdatering, og da fikk jeg meg en overraskelse. Det er riktignok ikke synlig på hjemmesiden min, men koden som var plassert mellom body og den første div-tagen var dette:

<div style="position:absolute; top:0px; width: 80px; text-indent: 85px; overflow: hidden; white-space: nowrap;"><ul style="padding-left: 100px;"><li>Børres startside ... Startside tilpasset mine behov ... Brres startside Startsiden DVB Nedlastinger Vret Annonser AutoDB.no FINN.no zett.no Aviser agderposten.no Dagbladet.no ...  <li><a href="http://batu.8k.com/viagra/viagra-side-effects.html" title="viagra side effects">viagra side effects</a> - This is the Cdn equivalent (of the FDA) These have avenues for reporting also. <li><a href="http://leigacy.freeservers.com/fioricet/diazepam-valium.html" title="diazepam valium">diazepam valium</a> - I would bet, however, that if he cuts down on some carbs in his diet and adds more protein as well as omega 3 fatty acids (flax seed oil), he will probably not have to take any blood pressure medicine at all. <li><a href="http://vesino.sitesled.com/nolvadex/levitra-directions.html" title="levitra directions">levitra directions</a> - The SSRIs have been found to be pretty safe with long-term use -- the main difficulty is poop-out, which happens with the older ADs too -- but that doesn't do a whole lot of good if they don't work for you! <li><a href="http://ahmetin.8k.com/overseas-pharmacy/overseas-prescriptions.html" title="overseas prescriptions">overseas prescriptions</a> - I hav felt better today that I have in the last 2 years, and am looking forward to getting the rest of the mercury out and the root canal pulled. <li><a href="http://trejos.snn.gr/lortab/generic-lortab.html" title="generic lortab">generic lortab</a> - The fee for service members will pay a 10. <li><a href="http://mathom.50megs.com/butalbital/accutane-and-alcohol.html" title="accutane and alcohol">accutane and alcohol</a> - An interesting battle has broken out in the drug-discount card area in a matter involving AARP cardholders. <li><a href="http://ancord.8m.com/bactrim/bactrim-ds.html" title="bactrim ds">bactrim ds</a> - Also does anyone experience pain sensations through the length of the leg in addition to bladder pain. <li><a href="http://www.freewebs.com/aasila/lorazepam/drug-lorazepam-store.html" title="drug lorazepam store">drug lorazepam store</a> - And you are the very LAST person to be telling others what is appropriate. <li><a href="http://www.galeon.com/cisco36/oxycodone/ethex-oxycodone.html" title="ethex oxycodone">ethex oxycodone</a> - Too bad I don't know of any disgruntled airline pilots. <li><a href="http://naltrexone.szm.sk/accutane/acutane.html" title="acutane">acutane</a> - Here's the message with my reply edited in. <li><a href="http://lemans.50megs.com/zithromax/zithromax-zpac.html" title="zithromax zpac">zithromax zpac</a> - In the same vein many brand name drug companies are offering free samples or rebates of their drugs by obtaining coupons from the patent holding drug company. <li><a href="http://curcuna.50megs.com/viagra/buy-viagra.html" title="buy viagra">buy viagra</a> - In terms of safety for future surgeries, you might want to pose your question to Paul Ting (be honest with him. <li><a href="http://denton.happyhost.org/international-pharmacy/amoxicillin-clavulanic-acid.html" title="amoxicillin clavulanic acid">amoxicillin clavulanic acid</a> - Doctors were paid to speak about Neurotin and encourage its usage for off-label purposes. <li><a href="http://leigacy.freeservers.com/clindamycin/clindamycin-gel.html" title="clindamycin gel">clindamycin gel</a> - Ginseng can reduce blood sugar levels in people with type 2 diabetes (formerly called adult-onset or noninsulin-dependent diabetes). <li><a href="http://csikokft.extra.hu/tramadol/tramadol-prescription.html" title="tramadol prescription">tramadol prescription</a> - Sit around here and listen to the number of people helped by MAOI's. <li><a href="http://36cmchk.50megs.com/clomid/clomid-success-stories.html" title="clomid success stories">clomid success stories</a> - The Census Bureau will announce the number of Americans who have no health insurance coverage next month, with the figure expected to be in the range of 40 million, up from the 38. <li><a href="http://rass.snn.gr/hydrocodone/hydrocodone-retail-price.html" title="hydrocodone retail price">hydrocodone retail price</a> - You have relief and placebo mixed up. <li><a href="http://clapes.snn.gr/oxycontin/oxycodone-512.html" title="oxycodone 512">oxycodone 512</a> - The FDA can't give final approval to the generic product unless the generic drug company wins the case or all of the drug's patents listed in the Orange Book expire. <li><a href="http://atacand.szm.sk/prevacid/prevacid-over-the-counter.html" title="prevacid over the counter">prevacid over the counter</a> - According to the Kaiser Family Foundation, 45% of employers with three to nine workers now offer no health insurance to its employees, which is up 3% from the figure last year. <li><a href="http://homepages.pathfinder.gr/yshart/metrogel/metrogel-for-acne.html" title="metrogel for acne">metrogel for acne</a> - It is illegal for a drug company to give free samples of a drug to a physician with the expectation that the doctor will then bill the patient or insurers for the drug. <li><a href="http://bangaja.multiservers.com/nolvadex/cheap-nolvadex.html" title="cheap nolvadex">cheap nolvadex</a> - I sarted to feel very funng like I was going to pass out And my heart was racing so fast like I was going to have a heart attack. <li><a href="http://delal.50megs.com/synthroid/synthroid-dosage.html" title="synthroid dosage">synthroid dosage</a> - A drug reimportation law was passed in 2000 and President Clinton did allow it to become the law. <li><a href="http://vineta.sitesled.com/oxycontin/how-to-shoot-oxycontin.html" title="how to shoot oxycontin">how to shoot oxycontin</a> - This is sadly a regular occurrence on mha. <li><a href="http://abaco.ya.com/dorpe/zithromax/zithromax-dose.html" title="zithromax dose">zithromax dose</a> - Not saying they will, just saying that they MIGHT and that is good enough for me. <li><a href="http://www.freewebs.com/3246/cymbalta/valtrex-dosage.html" title="valtrex dosage">valtrex dosage</a> - I understand that I will get addicted to either of these regardless, but with the pain I go through everyday I have no choice but to take something. <li><a href="http://www.freewebs.com/1dna/lortab/mexico-lortab.html" title="mexico lortab">mexico lortab</a> - In a memo dated June 26, 1995 a marketing executive at Warner-Lambert said that in the Northeast, doctors who attended educational dinners that were held where Neurontin was the featured drug, wrote 70% more off-label prescriptions for the drug than doctors who did not attend. <li><a href="http://biologyzone.galeon.com/paxil/paxil-online.html" title="paxil online">paxil online</a> - Something happen to me and it was not a panic attack. <li><a href="http://mendip.dzaba.com/ephedrine/ephedrine-discount.html" title="ephedrine discount">ephedrine discount</a> - Like some other people interviewed for this story, she did not want her name used because of the fear they might be doing something illegal. <li><a href="http://melena.hit.bg/winstrol/valium-dosage.html" title="valium dosage">valium dosage</a> - A person taking antidepressants shouldnt have to worry about a blood pressure crisis, which can be bought on by many unexpected things including ordinary cough mixture. <li><a href="http://asport.happyhost.org/hydrocodone-without-prescription/cozaar-50-mg.html" title="cozaar 50 mg">cozaar 50 mg</a> - This may further reduce the circulation to your fingers and toes. <li><a href="http://euge14.50megs.com/propecia/saw-palmetto.html" title="saw palmetto">saw palmetto</a> - But Rich does't care Bingo! <li><a href="http://homepages.pathfinder.gr/zanor/fioricet/fioricet-120-tabs.html" title="fioricet 120 tabs">fioricet 120 tabs</a> - How do you seize the evidence? <li><a href="http://gird.sitesled.com/carisoprodol/accutane-before-and-after.html" title="accutane before and after">accutane before and after</a> - Can you tell me where to obtain a copy of the report from the Yale group who used L-arginine? <li><a href="http://benega.snn.gr/synthroid/buy-synthroid.html" title="buy synthroid">buy synthroid</a> - And if someone is wanting to add something to their regiment what would you recommend first the Proxiphen-n or the nano shampoo? <li><a href="http://mirco.szm.sk/diovan/really-cheap-diovan.html" title="really cheap diovan">really cheap diovan</a> - The new schedule specifies the amounts paid to doctors for the more than 7,000 services and procedures for which they treat the over 40 million Medicare beneficiaries. <li><a href="http://tarlo.sitesled.com/propecia/propecia-online.html" title="propecia online">propecia online</a> - In Hawaii legislation was passed this year that requires the drug companies to report how much they are spending on marketing. <li><a href="http://olanzapine.szm.sk/propoxyphene/darvocet-5113.html" title="darvocet 5113">darvocet 5113</a> - Specially those stuck on high potency narcs that doctors dont wanna give out any more. <li><a href="http://ahmetin.8k.com/albuterol/albuterol-pregnancy.html" title="albuterol pregnancy">albuterol pregnancy</a> - The parents of a patient who died after using one of their inhalers are presently suing Schering. <li><a href="http://fust.happyhost.org/fioricet/fioricet-online.html" title="fioricet online">fioricet online</a> - She did it with Mark MD when he aggressively attacked her using profanity because he could not take her obnoxiousness. <li><a href="http://www.galeon.com/chamaeleon/plavix/plavix-75mg.html" title="plavix 75mg">plavix 75mg</a> - Hollister, MA, LCSW A. <li><a href="http://lupel.uw.hu/soma/carisoprodol-soma.html" title="carisoprodol soma">carisoprodol soma</a> - I siad, the dental work was over, the bill was paid and that burden was lifted. <li><a href="http://www.galeon.com/elmacetero/diovan/cleocin-2.html" title="cleocin 2">cleocin 2</a> - It came about due to RELIEF that the mercury was out of your mouth and that the dental work was finally over. <li><a href="http://lechan.host.sk/tadalafil/tadalafil-order.html" title="tadalafil order">tadalafil order</a> - The difference is that with drugs the dangers are for the most part known (there are of course exceptions) Uh huh. <li><a href="http://fluanxol.szm.sk/percocet/percocet-dosage.html" title="percocet dosage">percocet dosage</a> - Note that Jan stated that she felt better than she had in two years on June 18,1999. <li><a href="http://fluanxol.szm.sk/wellbutrin/quit-smoking.html" title="quit smoking">quit smoking</a> - Prophylaxis list--nothing new since last month - alt. <li><a href="http://servat.dzaba.com/cialis/atenolol-chlorthalidone.html" title="atenolol chlorthalidone">atenolol chlorthalidone</a> - We have created two separate articles concerning the issue of dealing with the issue of lowering the price of prescription drugs.</ul></div>

 

ikke så rent lite heller, masse linker å skit. hvordan kom det seg inn dit isåfall?

 

EDIT: Ser nå at de første linjene er hentet fra min hjemmeside, men jeg har ikke annonser for viagra eller noe av det andre som starter omtrent f.o.m. 3 linje der, hehe....

Endret 20. mai 2009 av HulkHaugen

[jonnor]

Gjennom et eller flere sikkerhetshull i oppsettet ditt. Har du skrevet siden selv? Drifter du den selv?

 

Forøvrig er ikke slik "refferal" cracking veldig uvanlig.

[Bolson]

Gjennom et eller flere sikkerhetshull i oppsettet ditt. Har du skrevet siden selv? Drifter du den selv?

 

Forøvrig er ikke slik "refferal" cracking veldig uvanlig.

 

Særdeles vanlig for å si det mildt.

 

@HulkHaugen:

 

Som NorthWawe skriver, her er det et pent lite sikkerhetshull. Men vi trenger langt flere opplysninger for å kunne hjelpe til med å tette dette.

[HulkHaugen]

jeg har skrevet den selv i notepad, veldig simpel xhtml+css, og den ligger på 110mb.com sin server...

 

EDIT: dere kan jo se på siden selv:

 

Børres Startside

 

EDIT2: Den går glatt igjennom W3C, både xhtml og css, men det garanterer vel ikke mot sikkerhetshull....?

Endret 20. mai 2009 av HulkHaugen

[Bolson]

jeg har skrevet den selv i notepad, veldig simpel xhtml+css, og den ligger på 110mb.com sin server...

 

Da er feilen trolig hos 110mb.com. En ren HTML side skal egentlig ikke kunne crackes uten at man kommer seg inn gjennom hull i ftp eller annen service på serveren.

 

Hvordan oppdaterer du siden.

[HulkHaugen]

hehe, jeg må logge meg inn på 110mb.com sine sider og oppdatere via webgui. Grunnen til at jeg valgte dette var fordi jeg ikke hadde adgang med ftp-klienter på det nettet jeg brukte da jeg lagde siden...

 

kanskje ikke så dumt å bytte passord på den siden, har vel kanskje verdens mest vanlige passord der, uten at jeg skal si nøyaktig hva det er...

 

EDIT: Ja her har det skjedd noe, for passordet mitt virket ikke langer. bestillte nytt passord nå...

Endret 20. mai 2009 av HulkHaugen

[jonnor]

Si ifra til de hoster websiden om problemet. Hvis det ikke var du som endret filen sist, pass på at de også for beskjed om tidspunktet.

Og bytt til et passord som ikke kan slåes opp i en hvilken som helst ordbok.

[Kris]

Bruk denne, så får du et godt passord