Pixelated a phpBB Template by SkaidonDesigns
 
Kaktusan Corp. Support Area Forum Index
www.kaktusancorp.com
www.cheapestadultscripts.com
Play with the Best, be the Best!
Plug Rush
FAQ
Search
Memberlist
Usergroups
Profile
Log in to check your private messages
Log in

The Mightiest Webmaster Solutions Ever
Blogs Automater
Blogs Automater
Links Organizer
Links Organizer
Rocket Pinger
Rocket Pinger
Blogs Organizer
Blogs Organizer

Haven't registered yet? Do it here now!
Google - Blocking My Blog As An Attack/Malware Site
Goto page Previous  1, 2
 
Post new topic   Reply to topic    Kaktusan Corp. Support Area Forum Index -> Porn Blog Space
View previous topic :: View next topic  
Author Message
webmissy



Joined: 07 May 2012
Posts: 66

PostPosted: Thu Feb 14, 2013 8:57 am    Post subject: Reply with quote
Some more of my blogs have been blocked now. So whatever is causing this is getting worse and not better. I expect all my blogs will be blocked soon as more go every day. Whether it's google screwing up or some genius piece of hacking that has everybody fooled bar google, congratulations! You have ruined the reputation of my blogs.

I've set my blogs to recycle old posts and I will not be adding any new content until somebody can figure out exactly what is going on here.


Last edited by webmissy on Thu Feb 14, 2013 9:46 am; edited 1 time in total
Back to top
View user's profile Send private message

Author Message
webmissy



Joined: 07 May 2012
Posts: 66

PostPosted: Thu Feb 14, 2013 9:06 am    Post subject: Reply with quote
I've requested an independent review on one my blogs At stopbadware.org. Apparently this review is conducted by a person rather than a machine. Whether they will actually look at and review a porn blog or not, I don't know.
Back to top
View user's profile Send private message

Author Message
webmissy



Joined: 07 May 2012
Posts: 66

PostPosted: Sat Feb 16, 2013 1:35 pm    Post subject: Reply with quote
From a guy over at stopbadware forum.

RE: spankme.pornblogspace.com

The error handling on the site is hacked. When I request a URL that does not exist, a URL that returns a 404 file not found error, the content that is returned contains a block of malicious javascript

<sc> try{window.document.body/=2}catch(dgsgsdg){whwej=12;ww=win ............. [snipped a bit] .........................String["fro"+"mC"+"harCode"](parseInt(n[i],12*2+1+1));}z=s;ww["eval"](s);}}}}</sc>

Typically that block of script is written using some obfuscated php code

eval(gzinflate(base64_decode(’ then a long string of seemingly random characters. Suggest you start by checking your homepage and common files such as your header.

https://www.badwarebusters.org/main/itemview/32020

Can you take a look please.
Back to top
View user's profile Send private message

Author Message
kaktus
Owner


Joined: 22 May 2004
Posts: 1576
Location: CheapestAdultScripts.com

PostPosted: Sat Feb 16, 2013 5:21 pm    Post subject: Reply with quote
well, there is no such thing

Open any url you like that will lead to a 404.. like

http://pornblogspace.com/sadasdadfwer34gergerg

http://fhg.pornblogspace.com/asdadfesar34tgedgret

Do a view source and you will see there is no such malicious code anywhere. There is a plain plugrush iframe.. I even investigated the source code of the plugrush's iframe document and again no such malicious code..
_________________
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number

Author Message
webmissy



Joined: 07 May 2012
Posts: 66

PostPosted: Sat Feb 16, 2013 6:25 pm    Post subject: Reply with quote
Ok thanks. I don't know what else to do now. Sadly I guess that's pretty much it for those blogs then. Crying or Very sad
Back to top
View user's profile Send private message

Author Message
kaktus
Owner


Joined: 22 May 2004
Posts: 1576
Location: CheapestAdultScripts.com

PostPosted: Sat Feb 16, 2013 7:27 pm    Post subject: Reply with quote
yeah.. they will get fixed anytime soon when G fixes up its things..

meanwhile you can be creating new blogs if you like and/or at the other free hosts as well..
_________________
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number

Author Message
webmissy



Joined: 07 May 2012
Posts: 66

PostPosted: Sun Feb 17, 2013 10:24 am    Post subject: Reply with quote
Hi, click on the link below. What is that big long script in front of the HTML. Is that supposed to be there?

http://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fspankme.pornblogspace.com%2F404&ref_sel=Google&ua_sel=ff
Back to top
View user's profile Send private message

Author Message
kaktus
Owner


Joined: 22 May 2004
Posts: 1576
Location: CheapestAdultScripts.com

PostPosted: Sun Feb 17, 2013 11:47 am    Post subject: Reply with quote
OK, i finally found it!

It looks like there was some GEOIP or something else, because i never got that code from my pc or other pcs in my room.. I just visited the site from a VPS i have and i found the code.

I removed it and now all should clear up

http://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fspankme.pornblogspace.com%2F404&ref_sel=Google&ua_sel=ff

http://sitecheck.sucuri.net/results/spankme.pornblogspace.com/404

it will now take some time for Google to unblacklist the urls..
_________________
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number

Author Message
webmissy



Joined: 07 May 2012
Posts: 66

PostPosted: Sun Feb 17, 2013 11:56 am    Post subject: Reply with quote
Yay! Thank you. At least we now know that Google and Sucuri are pretty good at malware detection. Very Happy

I don't suppose you know what it was doing by any chance. My virus scan is clear on my computer, so hopefully it hasn't dropped anything nasty onto my PC.
Back to top
View user's profile Send private message

Author Message
kaktus
Owner


Joined: 22 May 2004
Posts: 1576
Location: CheapestAdultScripts.com

PostPosted: Sun Feb 17, 2013 11:58 am    Post subject: Reply with quote
yeah, it seems.. well i've never dealt with malicious codes inserted to any of my sites and thats why it took all that hassle.. Well, everything has its first time..

No, i don't know what it does, probably not something something really nasty
_________________
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number

Display posts from previous:   
Post new topic   Reply to topic    Kaktusan Corp. Support Area Forum Index -> Porn Blog Space All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2002 phpBB Group


 
phpBB Template designed by SkaidonDesigns