SaabCentral Forums banner

Status
Not open for further replies.
1 - 16 of 16 Posts

·
Administrator
Joined
·
1,087 Posts
Discussion Starter #1
Hello Everyone.

As some of you noticed over the holiday an ad was put at the top of the page and at the bottom. This was not us that put those ads up.

It seems that over the holiday someone hacked into the system and used one of our old admins access to not only put up those two ads but delete a bunch of plug ins and a few other actions that i have yet to figure out.

It looks like a hacker who places ads with his google account and deletes any plug ins that he believes would give away what they did. Then they proceed to make a few bucks.

WE have contacted google and are looking into this issue.

I will need everyone's help to figure out what the person has messed with. They also deleted out soft delete plug in. This makes it hard to trace what they did.

So if you notice anything out of the ordinary please post in this thread so we can get everything back to normal.

I do apologize for any inconvenience.

Helena
 

·
Registered
Joined
·
2,744 Posts
Anytime i bring my curser over the tabs "home, news, gaaleries, etc" it acts weird. itll kinda flicker and I'll have to repeatidly click the tab to make it load.
 

·
Registered
Joined
·
2,716 Posts
That's probably due to the fact that portion of the screen is present;y obscured by the "attack" that Helena has outlined above.

For most people, if not all, the top right of the screen looks like this at the moment, whether logged in or not:

As you'll see, there's a huge "this webpage cannot be" right where the buttons would normally be.
 

·
Registered
Joined
·
1,129 Posts
The menu bug is caused by a stray javascript tag, but what you're seeing Steve looks like an iframe without a valid URL.

I'm not getting that here, so it's either cached or restricted to IE users only.

Would you mind sending the source (right click -> view source) to me, I'm trying to find more information. Email is paulm @ cresona.co.uk

Thanks.
 

·
Registered
Joined
·
2,716 Posts
have no email at the mo, but here's the source of what I, and a few others, are seeing:
<!DOCTYPEHTMLPUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">






<html>







<head>



<linkrel="stylesheet" type="text/css" href="ErrorPageTemplate.css" >







<metahttp-equiv="Content-Type" content="text/html; charset=UTF-8">







<title>HTTP 400 Bad Request</title>







<scriptsrc="errorPageStrings.js" language="javascript" type="text/javascript">



</script>



<scriptsrc="httpErrorPagesScripts.js" language="javascript" type="text/javascript">



</script>



</head>







<bodyonLoad="javascript:initHomepage(); expandCollapse('infoBlockID', true); initGoBack(); initMoreInfo('infoBlockID');">







<tablewidth="730" cellpadding="0" cellspacing="0" border="0">







<!-- Error title -->



<tr>



<tdid="infoIconAlign" width="60" align="left" valign="top" rowspan="2">



<imgsrc="info_48.png" id="infoIcon" alt="Info icon">



</td>



<tdid="mainTitleAlign" valign="middle" align="left" width="*">



<h1id="mainTitle">The webpage cannot be found</h1>



</td>



</tr>















<tr>



<!-- This row is for HTTP status code, as well as the divider-->



<tdid="http400Align" class="errorCodeAndDivider" align="right"><IDid="http400"> HTTP 400</ID>



<divclass="divider"></div>



</td>



</tr>











<!-- Error Body -->







<!-- What you can do -->



<tr>



<td>



 



</td>



<tdid="likelyCausesAlign" valign="top" align="left">



<h3id="likelyCauses">Most likely causes:</h3>



<ul>



<liid="causeErrorInAddress">There might be a typing error in the address.</li>



<liid="causeLinkOutOfDate">If you clicked on a link, it may be out of date.</li>



</ul>



</td>



</tr>







<tr>



<td>



 



</td>



<tdid="whatToTryAlign" valign="top" align="left">



<h2id="whatToTry">What you can try:</h2>



</td>



</tr>







<!-- retype address -->



<tr>



<td >



 



</td>



<tdid="retypeAddressAlign" align="left" valign="middle">



<h4>



<table>



<tr>



<tdvalign="top">



<imgsrc="bullet.png" border="0" alt="" class="actionIcon">



</td>



<tdvalign="top">



<IDid="retypeAddress">Retype the address.</ID>



</td>



<tr>



</table>



</h4>



</td>



</tr>







<!-- back to previous page -->



<tr>



<td >



 



</td>



<tdid="goBackAlign" align="left" valign="middle">



<h4>



<table>



<tr>



<tdvalign="top">



<imgsrc="bullet.png" border="0" alt="" class="actionIcon">



</td>



<tdvalign="top">



<spanid="goBackContainer"></span><noscriptid="goBack">Go back to the previous page.</noscript>



</td>



</tr>



</table>



</h4>



</td>



</tr>











<!-- top level domain-->



<tr>



<td >



 



</td>



<tdid="mainSiteAlign" align="left" valign="middle">



<h4>



<table>



<tr>



<tdvalign="top">



<imgsrc="bullet.png" border="0" alt="" class="actionIcon">



</td>



<tdvalign="top">



<IDid="mainSite1">Go to </ID><spanid="homepageContainer"><noscriptid="mainSite2">the main site</noscript></span><IDid="mainSite3"> and look for the information you want.</ID>



</td>



</tr>



</table>



</h4>



</td>



</tr>







<!-- InfoBlock -->



<tr>



<tdid="infoBlockAlign" align="right" valign="top">



 



</td>



<tdid="moreInfoAlign" align="left" valign="middle">



<h4>



<table>



<tr>



<tdvalign="top">



<ahref="#" onclick="javascript:expandCollapse('infoBlockID', true); return false;"><imgsrc="down.png" id="infoBlockIDImage" border="0" class="actionIcon" alt="More information"></a>



</td>



<tdvalign="top">



<spanid="moreInfoContainer"></span>



<noscript><IDid="moreInformation">More information</ID></noscript>



</td>



</tr>



</table>



</h4>



<divid="infoBlockID" class="infoBlock">



<pid="errorExplanation">This error (HTTP 400 Bad Request) means that Internet Explorer was able to connect to the web server, but the webpage could not be found because of a problem with the address.</p>



<pid="moreInfoSeeHelp">For more information about HTTP errors, see Help.</p>



</div>



</td>



</tr>



</table>







</body>



</html>
 

·
Registered
Joined
·
2,744 Posts
yes my problem is a java script. the bottom left of the internetz screens starts flashing it and that new ad is at the top and dead center for me.
 

·
Registered
Joined
·
2,716 Posts
The menu bug is caused by a stray javascript tag, but what you're seeing Steve looks like an iframe without a valid URL.

I'm not getting that here, so it's either cached or restricted to IE users only.

Would you mind sending the source (right click -> view source) to me, I'm trying to find more information.
Thanks.
Have now emailed you the Saabcentral source, at least I think I have
 

·
Registered
Joined
·
2,716 Posts
Cheers Steve

The source doesn't show any rogue iframes, but it could be slipstreamed in via another javascript file.
Whatever's happened, the iframe is gone now anyway and the pages appear to be correct (for me at least)
 

·
Banned
Joined
·
1 Posts
Hello Everyone.

As some of you noticed over the holiday an ad was put at the top of the page and at the bottom. This was not us that put those ads up.

It seems that over the holiday someone hacked into the system and used one of our old admins access to not only put up those two ads but delete a bunch of plug ins and a few other actions that i have yet to figure out.

It looks like a hacker who places ads with his google account and deletes any plug ins that he believes would give away what they did. Then they proceed to make a few bucks.

WE have contacted google and are looking into this issue.

I will need everyone's help to figure out what the person has messed with. They also deleted out soft delete plug in. This makes it hard to trace what they did.

So if you notice anything out of the ordinary please post in this thread so we can get everything back to normal.

I do apologize for any inconvenience.

Helena
Hello Helena !
well ... as i see, you've add a lot of thing that i didn't do :nono;:cry:

like i didn't delete anything at all :nono;
or i didn't mess with anything .. :confused:

all what i did is i've put an ad above, that's it :confused::roll:
i'm not a cracker you know !!

and for those that they said that there some errors !

it's not ME :lol:

anyway ... helena if you want

to contact me : [email protected]

i can secure you website for you :cool:

take care
;oops:

ZoFix
 
1 - 16 of 16 Posts
Status
Not open for further replies.
Top