Account Options

  1. Sign in
The old Google Groups will be going away soon.
Switch to the new Google Groups.
Google Groups Home
« Groups Home
Message from discussion Our Google Listing Hijacked!
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Followup To:
Add Cc | Add Followup-to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers you hear
 
JLH  
View profile  
 More options Jan 25 2008, 12:38 pm
From: JLH
Date: Fri, 25 Jan 2008 09:38:50 -0800 (PST)
Local: Fri, Jan 25 2008 12:38 pm
Subject: Re: Our Google Listing Hijacked!
I'm no expert at finding and fixing hacks by any stretch, but I have
heard that many have been injected by having some folders set to 777
access.  One that I saw had .htaccess changes in every subfolder on
the site and two rouge .php files inserted on the site.  If you can
view through FTP the files on your site and perhaps find a pattern of
dates of changes that you didn't make, then you may be able to find
the offending stuff.

I'd definitely get the host involved to let them know that the server
may be vulnerable to attack as it would be in their best interest to
protect you and their other clients as well.  Perhaps they can find
the hole and the intrusions as well.

On Jan 25, 11:10 am, geek wrote:

> Hello JLH,

> THANK YOU so much for such quick response. Sorry - not! I am very
> hopeful to hear that it is not the problem described in that link...

> Do you know where I can find some instructions to fix the problem?

> Would re-building my site from scratch solve the problem, or is it
> something happening above that directory where this site is located on
> my hosted server?

> What measures can I take to prevent this from happening in the future?

> Best regards

> On Jan 25, 1:39 am, JLH wrote:

> > It's not a 302 hijacking.  Sorry.

> > Your site has probably been hacked.

> > If you use a firefox add-on likehttps://addons.mozilla.org/en-US/firefox/addon/953
> > and change the referer when visiting your site to something from
> > Google ( I used  http://www.google.com/search?q=site%3Adenvergeeks.com)
> > every time you load up a page on your site you will be redirected to
> > the offending site.  It has nothing to do with Google or a 302
> > hijacking.

> > My guess is that you didn't intend for this to happen and that your
> > site has some security holes in it and someone has injected some code
> > into it.

> > There are many different hacks, but this is just one explanation,http://johnmu.com/hack-hidden-redirect/

> > On Jan 25, 1:31 am, geek wrote:

> > > This page describes exactly how the link in our Google listing (http://
> > > denvergeeks.com)has been hijacked:

> > >http://clsc.net/research/google-302-page-hijack.htm

> > > We are a computer repair company, yet our url is being redirected to a
> > > site that is infecting computers! It is devastating to us.

> > > I filed a spam report with Google more than two months ago, but no
> > > response has been received to date.

> > > Can anyone help?- Hide quoted text -

> > - Show quoted text -


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.