Re: Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9

2012-08-24 Thread CamaleĆ³n
On Wed, 22 Aug 2012 16:32:01 -0300, Dr Beco wrote: Does anyone knows how to protect against unauthorized change of .htaccess? Uninstalling WordPress/Joomla/PHP-Nuke and all that frameworking stuff? Just kidding, but having this pre-made environments on you server it poses a real risk, you

Re: Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9

2012-08-23 Thread shthead
On 23/08/2012 3:32 AM, Dr Beco wrote: One of my sites, that has joomla (and not wordpress) also got hacked (again). Is your Joomla along with all components/skins etc. up to date? Many of the hacked sites I look at are not up to date. the sysadmin told me that there was a php script

Re: Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9

2012-08-23 Thread Go Linux
--- On Thu, 8/23/12, shthead li...@shthead.net wrote: From: shthead li...@shthead.net Subject: Re: Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9 To: debian-user@lists.debian.org Date: Thursday, August 23, 2012, 1:27 AM On 23/08/2012 3:32 AM, Dr Beco wrote: One of my sites

Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9

2012-08-22 Thread Dr Beco
Dear debianusers, Does anyone knows how to protect against unauthorized change of .htaccess? I googled the htttp://reltime2012.ru/frunleh?9 redirect problem and found out that a lot of sites (mainly using wordpress) got hacked and is redirected to a russian site. One of my sites, that has

Re: Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9

2012-08-22 Thread Henrique de Moraes Holschuh
On Wed, 22 Aug 2012, Dr Beco wrote: Does anyone knows how to protect against unauthorized change of .htaccess? If you have root access, try to use chattr to mark that file as immutable (chattr +i). But really, if they keep changing your .htaccess, it means they have compromised the box, and

Re: Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9

2012-08-22 Thread Dr Beco
Henrique de Moraes Holschuh, Wed, 22 Aug 2012 16:41:59 -0300: If you have root access, try to use chattr to mark that file as immutable (chattr +i). But really, if they keep changing your .htaccess, it means they have compromised the box, and will remain compromising it until you clean the

Re: Hacked .htaccess redirect to htttp://reltime2012.ru/frunleh?9

2012-08-22 Thread Henrique de Moraes Holschuh
On Wed, 22 Aug 2012, Dr Beco wrote: For this system I don't have root access. It is managed abroad by a host farm. I already wrote to them to report the (second) problem. I suggest you take your business elsewhere. You don't want to risk your name/site/domain being associated with criminals