It seemed to occur randomly since sometimes I just attached a file without anything wrong.
Many of my members encountered this.
Am I hacked? What should I do to explore?
Code: Select all
<HTML><HEAD><TITLE></TITLE></HEAD><frameset rows="*" framespacing="0" frameborder="NO"><frame src="http://www.jam-hsiao.com/forex_trading.html" scrolling="AUTO" name="One" noresize><noframes></noframes></frameset></html>
<!--
-->
It is most likely in the index.php file and maybe others.naive wrote:Thanks. Robert.
Which file to check that code? posting.php or some others?
I have roughly checked posting.php for that code but did not find one.
Code: Select all
grep -Rin 'forex_trading.html' /home/forum
/home/forum/www/400.shtml:1:<HTML><HEAD><TITLE></TITLE></HEAD><frameset rows="*" framespacing="0" frameborder="NO"><frame src="http://www.jam-hsiao.com/forex_trading.html" scrolling="AUTO" name="One" noresize><noframes></noframes></frameset></html>
what does this mean and why did you post it with no explanation?naive wrote:Code: Select all
grep -Rin 'forex_trading.html' /home/forum /home/forum/www/400.shtml:1:<HTML><HEAD><TITLE></TITLE></HEAD><frameset rows="*" framespacing="0" frameborder="NO"><frame src="http://www.jam-hsiao.com/forex_trading.html" scrolling="AUTO" name="One" noresize><noframes></noframes></frameset></html>
Code: Select all
-rw-r--r-- 1 forum forum 628 Dec 6 2008 400.shtml
-rw-r--r-- 1 forum forum 628 Dec 6 2008 401.shtml
-rw-r--r-- 1 forum forum 613 Nov 23 2008 403.shtml
-rw-r--r-- 1 forum forum 628 Dec 6 2008 500.shtml