If you are a fan of Windows Mobile, I'm sure Coolsmartphone.com is on the list regularly read, it's on me, but they have terrible problems with an attack at the end of Google have been pretty much knocked them from the Internet . They each search that Google returns a page Coolsmartphone is a terrible message to them and said: "This site may harm your computer." Leigh has worked tirelessly to address the problem and now reports all goes well. You can read the detailed explanation after the break.
OK, a quick update on how things with the site. Google now have pretty much knocked us from the Internet. They each search that Google returns a page Coolsmartphone is a terrible message to them and said: "This site may harm your computer." If you visit us in Firefox, you get a really horrible red page warning you about us and they will refuse to load the page, unless you ignore it.
We are now 100% sure that we have found and the problem is eliminated. I would like forum member "sTeDay" for his help tonight, plus all the messages of support, help and concern you have to send through - it is very much appreciated. Although we have removed the problem I am slightly at a loss to explain how they got there. A message here on the first page was changed and an IFRAME had been added to the end of it pulling code from a nasty Web site that tries to infect your machine with EXE files from various other websites. Somehow it had also changed the forum post in connection with this same story, which is a little confusing, as our internal systems would not normally fire changes in the forum automatically.
The problem could also arise in the ads on the side of the site, so I have removed every single Flash and Java display. This obviously has a massive financial hit for us, but I'm well aware of the problems you guys were out and I want to make sure that it does not happen again. I have e-mails and comments from people who have had to re-format their machines and start again. Although I personally believe that anyone with the Internet should be an anti-virus (AV) system, I would like to personally apologize to all those who either do not update their AV, has not made use or AV-AV, that missed the Download trial.
If there is someone out there experience with this hack (which came from places klikvp.com among others), please give me a shout at gears@coolsmartphone.com. Although I have removed the offending code, I'm not able to handle any type of SQL injection in each log file on our main server, so I'm assuming it's a different kind of hack. Even if someone has any contact with Google, I would love to hear from you - I've just filled in a form in their webmaster tools and got this answer ...
"If we find that it no longer violates our webmaster guidelines, we will index the site. Please allow several weeks for the renewed inquiry."
Several weeks? It took only a few days to us and black block Firefox / Google chrome access. Several weeks would leave us dead in the water, so please help if you can. : (
Thank you for your patience during this time. If any of our friends on other Windows Mobile sites wants to this story, please feel free.
Thank you. gears@coolsmartphone.com
Update - Thanks to everyone for your donations. I have in this bottom you should want to help, while we diagnose the problem. I've just done a thorough check with rkhunter and the good news is we have not had hacked into the server so it looks like an SQL injection of a sort possible.
OK, a quick update on how things with the site. Google now have pretty much knocked us from the Internet. They each search that Google returns a page Coolsmartphone is a terrible message to them and said: "This site may harm your computer." If you visit us in Firefox, you get a really horrible red page warning you about us and they will refuse to load the page, unless you ignore it.
We are now 100% sure that we have found and the problem is eliminated. I would like forum member "sTeDay" for his help tonight, plus all the messages of support, help and concern you have to send through - it is very much appreciated. Although we have removed the problem I am slightly at a loss to explain how they got there. A message here on the first page was changed and an IFRAME had been added to the end of it pulling code from a nasty Web site that tries to infect your machine with EXE files from various other websites. Somehow it had also changed the forum post in connection with this same story, which is a little confusing, as our internal systems would not normally fire changes in the forum automatically.
The problem could also arise in the ads on the side of the site, so I have removed every single Flash and Java display. This obviously has a massive financial hit for us, but I'm well aware of the problems you guys were out and I want to make sure that it does not happen again. I have e-mails and comments from people who have had to re-format their machines and start again. Although I personally believe that anyone with the Internet should be an anti-virus (AV) system, I would like to personally apologize to all those who either do not update their AV, has not made use or AV-AV, that missed the Download trial.
If there is someone out there experience with this hack (which came from places klikvp.com among others), please give me a shout at gears@coolsmartphone.com. Although I have removed the offending code, I'm not able to handle any type of SQL injection in each log file on our main server, so I'm assuming it's a different kind of hack. Even if someone has any contact with Google, I would love to hear from you - I've just filled in a form in their webmaster tools and got this answer ...
"If we find that it no longer violates our webmaster guidelines, we will index the site. Please allow several weeks for the renewed inquiry."
Several weeks? It took only a few days to us and black block Firefox / Google chrome access. Several weeks would leave us dead in the water, so please help if you can. : (
Thank you for your patience during this time. If any of our friends on other Windows Mobile sites wants to this story, please feel free.
Thank you. gears@coolsmartphone.com
Update - Thanks to everyone for your donations. I have in this bottom you should want to help, while we diagnose the problem. I've just done a thorough check with rkhunter and the good news is we have not had hacked into the server so it looks like an SQL injection of a sort possible.