Welcome to Web Design Blog

Your place for quality free vector graphics

WDB provides top quality vector graphics for designers all around the world
Premium membership provides you with DIRECT download links with no wait time (like rapidshare) and access to Premium Vector Graphics with commercial use rights.

Join Premium Now

Subscribe to the newsletter for free

Join over 21.000+ subscribers that are enjoying free vector graphics.

Garcya.us was infected

Posted on Dec 14, 2008 in News | 7 comments

This is the second time when someone asks me “Hey do you have a virus on your site?” and I always answer with NO, and NO, there was nothing here on Garcya.us/blog everything happened on the main domain Garcya.us in the main index.html file.

The index.html was injected with a script that was recognized by Antiviruses as a Threat JS/TrojanDownloader.Small.NBF trojan! See screenshot here.

When I downloaded index.html and edited locally there was nothing suspicious, but when I arrived at the end of the code, where the website code closes, I’ve saw an enormous blank space there. Ok so I’ve started scrolling, and scrolled like over 3000 pixels and guess what! At the end of the page, the code was present. See the screenshot of the code here.

How did this happen? NO CLUE but I’m sure glad that I’ve erased all the code and re-uploaded the cleaned index file.

Be sure to check yours, who knows, maybe you’re also infected…

[[T_F]]Data Leak Prevention - Data Security Solutions - Information Theft Protection, Detection and Prevention Software Productstracefusion_signature=9c5afbaa5462f9db430d2f6ff2c49455ef2ee14d917d10c16501733ea235d1e3a6380fe3cb97a6a0486737f1be08790c8701eba8462816bd01e6d240ad85a20ac660944ea96b4f954281f28b355c85bf6c0f4a7516cb81f2268733d9cdc90e7595e376662bfc5a49c98f69218bc69636e25b3330b9bacbc9413c6f78cd0ead495a3ce37f3e8a35d86d902fa2ac62b5140bf92cbda5d43e7800f45337d8dd30dab4fae2900c3fdbe80d47225f2747cc15ff2aab40b24df3c284dfe003dd1ce03f1d7ac264e21a1851276a996300d8ad519d5866c4ca4a3e57770bef4ced50a9cf17eac40e0b98984edbce2b6637ab285e3116d1d78841141776765e49bf3f805a8e726483e1a96a2e6d16884f9236e7e68e6a2f0a852784670b0e339355d3c679cad52fd707be96cd2c8ef6e4c1af83a6fc49b9cd34dd1ea0038006ab2cad19f3e467c806acee01d15d7e5b41f2335515132780103d0398905bacf836f7ac68a6da0c9738dbc8104da4433e184426757375b10273afd46ad7e810055d589e73a93a99e3e5d89ffd0276b63810bd233465cc6491a05c984fea982bae5873358b8d553188a9c30713609ebbdd0ed59e2467bce048bbffbb8b5b8f25d446d00bd5cb202871c0c85d1e2df0a9923e86d085cbb56da145ffd1a145fe07[[T_F]]

All the free vectors from WDB - Garcya.us downloaded as a regular member are available for personal use only!
If you would like to use the vectors downloaded from WDB - Garcya.us you should know that there is a commercial license available.
Commercial license is available for Premium Members, for only $20 / life (one time fee).
To join Premium Membership and benefit from commercial license, direct download links and premium vector content please visit this link.

Don't miss any free vector graphics!

Subscribe to the newsletter for free

Enter your email below to receive a newsletter everytime free vector graphics are added.
Join over 20.000+ subscribers that are enjoying free vector graphics.

http://www.lake54.com James Milligan

Hi there Garcya – I found your website today, and it’s amazing! I’ve already downloaded the osCommerce templates, the 306 ones, and the 42 premium hosting ones – absolutely amazing mate!

Will definitely be recommending in the future!

Sorry to hear about the trojan as well – who’d want to hack a website like this one?

James
http://www.Garcya.us Garcya

@James thanks for the feedback.
There are a lot of people who only enjoy when they do “damage” to others so I’m a “lucky case” for now..
http://createsean.com Sean

Been following via RSS for a long time and for the last 2-3 months I couldn’t actually visit unless I used a proxy. Tried again today when I saw this post and am happy to see than I can get here without a proxy again.

I love the resources you post to this blog, keep up the good work.
http://awhitebox.com Ali B.

There are 2 possible causes for this infection. Either someone gained access to your host account and manually injected that code, or your host got infected with that trojan and copied itself through your files. Here’s what I recommend:
1) Reset all site related passwords. That’s your ssh, control panel and even WP admin password.
2) Check all other files for that script.
3) Make sure that file access is set correctly (no write permission where you need them.
4) Email your host.
http://www.Garcya.us Garcya

@Sean sounds weird and I don’t think that this issues what the real problem at your end.
@Ali B. the wordpress blog wasn’t infected, only one single .html file from Garcya.us where I have my design firm website that has nothing to do with this blog.
Thanks again for your tips, will email the hosting provider and ask them to see what they have to say about this.
http://www.bft.com.my Web Design Malaysia

Is that Antiviruses trojan was pawerful for kill all the virus??