hacked?

Involved Joined: Apr 22, 2006 Posts: 356

have a site that all of a sudden when I click the forums link in the sommaire menu, the browser closes, a pop comes up telling me my pc may be infected, blablabla, the when I close it, anotherone pops up taking me to a page emulating antivirus software (antiviri64) and tries to install some sort of a cab file to my pc.

in looking through the site files I found a file called "bannermaker. exe"
don't know where that came from.

I have noticed that it only happens when the url is one of shortlinks, ie .html, if it is the old style link, ie modules/blablabla then it does not happen.
it seems to be all links with the "html" shortlink at the end of the file
where should I look and for what to fix this?

Posted: Thu Aug 14, 2008 4:52 pm

Not sure if you are really hacked.
I would use first something like an online virus scan.
There are other scanners but thats the latest I used and housecall isn´t bad.

http://www.trendsecure.com/portal/en-US/tools/security_tools/housecall

Posted: Thu Aug 14, 2008 7:51 pm

I found the issue, some one had over written the htaccess file, I guess the permissions were not set correctly..