Security breach? Russian webs link's all over my cs shop

Hi,



I’ve been having a problem in the last couple of weeks; when I open my admin end in explorer or firefox, and, for example, go to languages tab in order to translate something, this kind of backlinks appears in every traslation and then “glues” itself to my shop appearing in a lot of pages all over the place:



ручки waterman

пучковые ресницы



And there are a lot more loke these sites, all of them russian.



I’m getting desperate as I’m getting my shop infected and full of problems, is this a known problem or vulnerability?



For now I’ve been able to delet them all (at least I think so) and don’t work anymore with firefox, but everytime I try to open it here the links come infecting it.

I have cleaned my computor of adware, malware, even reinstalled all the browsers but still no luck… :frowning:



By the way, when I write something in this forum using firefox this problem also appens (as you can see by the bottom of this post. :-?



Thank you for your help



[quote name=‘E.Qi.Librium’]Hi,



I’ve been having a problem in the last couple of weeks; when I open my admin end in explorer or firefox, and, for example, go to languages tab in order to translate something, this kind of backlinks appears in every traslation and then “glues” itself to my shop appearing in a lot of pages all over the place:



ручки waterman

пучковые ресницы



And there are a lot more loke these sites, all of them russian.



I’m getting desperate as I’m getting my shop infected and full of problems, is this a known problem or vulnerability?



For now I’ve been able to delet them all (at least I think so) and don’t work anymore with firefox, but everytime I try to open it here the links come infecting it.

I have cleaned my computor of adware, malware, even reinstalled all the browsers but still no luck… :frowning:



By the way, when I write something in this forum using firefox this problem also appens (as you can see by the bottom of this post. :-?



Thank you for your help



















[SIZE=7][COLOR=Red]вакансии Харьков[/COLOR][/SIZE][/quote]





hxxp://job.kharkiv.biz/

I’m sorry Jesse, come again, didn’t quite understand… :confused:



Anyways, just wanted an advice in what to do to “kill” this thing

[quote name=‘E.Qi.Librium’]I’m sorry Jesse, come again, didn’t quite understand… :confused:



Anyways, just wanted an advice in what to do to “kill” this thing[/quote]



I’m not 100% sure how you want to kill it, I doubt your website has been hacked since your post had a foreign url added. I suggest that you clean your computer up first and have your host look at your website second.

EQ,



I also agree with what Jesse mentions, and would also add, that you should strongly reconsider whatever antivirus/firewall program you are currently using to protect your local pc, as it is pretty safe to say…it failed miserably & allowed you to become infected!



What is worse is that now that your local PC is infected, you also run the risk of infecting your site while visiting your CS-Cart admin & compromising your customers critical details!



Personally, I have used ESET smart security for the last 3 years & would not even consider installing any other av product on our small office network, but that is just my opinion, and it just plain works!



Regardless of what AV program you use, never let the virus signature updates expire, keep it current & up to date at all times!

And I thought Norton was the best… :-?



But this must be realy something related to internet safety, in witch I use also Mcafee, but I already run every test possible with 3 or 4 different tools on my computer and all of them say it’s 100% clean, safe and protected. I just don’t get it.

[QUOTE]And I thought Norton was the best[/QUOTE]



Not even close, they only have the most recognizable name… :wink:

Well, obviously your pc is infected otherwise the russian links would not be randomly entered in your posts.



Your call, however, I suggest uninstalling all of the AV, spyware, etc. security crap you now have installed on your PC, go to the ESET’s site, download and install ESET Smart Security, then run a complete PC scan to see what it finds.

Thank you Struck, that’s exactly what I’m doing right now :wink:

[quote name=‘Struck’]Well, obviously your pc is infected otherwise the russian links would not be randomly entered in your posts.



Your call, however, I suggest uninstalling all of the AV, spyware, etc. security crap you now have installed on your PC, go to the ESET’s site, download and install ESET Smart Security, then run a complete PC scan to see what it finds.[/QUOTE]



I use the Eset security suite and it is probably the best or at least close to it.



But it does not catch everything - for example spyware so it is a good idea to scan with several programs for safety.



Super anti spyware and malwarebytes are free and ESET support suggests their use in difficult situations.



Good luck your situation sounds stressful

Your welcome, good luck!



I don’t endorse too many tools, hosting companies, etc…, however, I will endorse ESET AV products every chance I get, and I do guarantee that you will be glad you installed it. Not only is it the most effective AV product in the world, it also runs so efficiently that you wont even know it is running in the background, truly a set it & forget it type product, the way AV should be!

Well, I won’t waste any time arguing my point or the such over the whole security subject, so I will just say that I have had the ESET Smart Security Suite installed (& absolutely nothing else security or malware related as it oftens creates conflict problems) on a small office network of 5 PCS for the last 4 years. Prior to that we have tried just about any AV program name you can toss out, and either they became a situation where we spent more time tweaking the programs to keep them working then actually running the business, or they bogged down the PC’s to the point where we could not live with keeping them installed. We are online like 24/7 and NEVER have we even had the slightest intrusion, or security related issue while using ESET products. But then again, none of us here visits porn sites and the such while at work! :smiley:

ZoneAlarm Extreme Security is what I use.

Best benefit is that new/foreign programs have to ask me for permission to access the internet first, also lists the domain/ip address. Amazing how many software programs are rouge.

[quote name=‘Struck’]none of us here visits porn sites and the such while at work! :D[/QUOTE]



Pfft… what a boring work place! haha, I’m joking :stuck_out_tongue:

[QUOTE]Amazing how many software programs are rouge.[/QUOTE]



And amazing just how much effort has to be put into warding off hackers & cyber terrorists looking to shut down the economy! It is like these phucks are multiplying like flys & come at you at every angle! :evil:

What, don’t tell me that visiting porn sites is dangerous!! Oh my gosh!!



Nah…just kidding :wink:



Ps.I have ESET running a full scan, unistalled all the other stuff, let’s see as I still don’t know if I install the super anti spyware or not

[QUOTE]Pfft… what a boring work place! haha, I’m joking[/QUOTE]



Well, I just tell employees that we have a zero tolerance level for this type of thing at the workplace, and it seems to work (although I do keep my office door closed most of the day!) . :stuck_out_tongue:

[QUOTE]What, don’t tell me that visiting porn sites is dangerous!! Oh my gosh!![/QUOTE]



EQ, I almost clicked your site link to take a peek, but I am afraid of becoming “infected”! :smiley:



PS: As Jesse stated, after you are done cleaning up your local PC’s, make sure that your have your host technician check your server & CS-Cart installation files to be certain that they are also clean as your PC became a “gateway” to possibly pass on virus scripts to your online store while you were visiting through the admin panel.



This has happened to at least a few people in the past here in the forums, certainly not “Happy Time”!

lol struck ! But no, this can’t be related to my cs shop, this happens everywere when I use firefox or explorer, it doesn’t happen with safari, crome and opera for example.

I suspect it is a game bar I have :oops: that began causing this, at least it’s the only thing in common with these 2 browsers, now for example I’m using crome and the links are gone.

But I didn’t know that my host could do something to perform a system check or clean, in fact I’m even afraid to ask them to “touch” my files. Oh gosh…

[QUOTE]this can’t be related to my cs shop, this happens everywere when I use firefox or explorer, it doesn’t happen with safari, crome and opera for example[/QUOTE]



No, not saying it is related to your CS-Cart shop in any way EQ, I am saying that your PC can act as the “gateway” in passing a virus or tracking script, etc. into your site files every time you visit your admin panel. This is why it is extremely important for you to protect your local PC because you are also an admin of your online store!


[QUOTE]I suspect it is a game bar I have that began causing this :oops: [/QUOTE]



Huhmmmmmmm, must be a fun game which I can only imagine… :shock: