Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDevelopment and...Development and...DNN Platform (o...DNN Platform (o...How to Remove Virus from Blog Entries?How to Remove Virus from Blog Entries?
Previous
 
Next
New Post
12/26/2009 4:59 AM
 

Hi my site was affected by unwanted malwares. The blog entry pages are affected by these malwares( limsdental.kr/, phuket4u.net/, rosemarypratherfoundation.net/bluejackmusic.ru/.) Google webmaster shows the malware affected pages as aspx pages. But those files are not available in the root directory. They are automatically created while creating new blog entries. How to remove malware from that files? I found some unwanted scripts and encrypted codes in html and .js files. I removed that codes and replaced in the server directory again. But how can I remove malware from Blog entry aspx files? Urgent. Please help.

Thanks in advance...

 
New Post
12/26/2009 5:13 AM
 

your site seems to be corrupted by hackers, who intruded either by any vulnarability of your system.

make sure, you have latest windows security updates applied to the server, use strong ftp passwords and use latest version of DotNetNuke and modules.

To clear the text, either use UI to edit entries (preferred) or modify texts directly in the blogposts table in the database.


Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
12/26/2009 7:33 AM
 

Thank you so much for your reply. I have strong password. If I try to open the blog entry UI, then it shows that "Its Harmfull to open this website". I checked with Database entries. But it has no encrypted code. So nothing can do in that. So I opened that UI and deleted that blog entry aspx pages. This is a temporary solution for me. But how can I prevent my site from such type of hacking.

 

Thanks in advance...

 
New Post
12/26/2009 8:32 AM
 

either the hacker got access using a weak password or used a known vulnarability. to protect:

  • make sure to have latest Windows security patches applied
  • make sure to use latest versions of DotNetNuke (4.9.5 or 5.2.1) and modules
  • make sure to use strong passwords.
  • check for new aspx files on the server which might have been created by the hacker as a back door 

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
Previous
 
Next
HomeHomeDevelopment and...Development and...DNN Platform (o...DNN Platform (o...How to Remove Virus from Blog Entries?How to Remove Virus from Blog Entries?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out