www.kl7uw.com - Hacked

classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

www.kl7uw.com - Hacked

Edward R Cole
Please do not sign into my site as it is infected (home computer was
hacked).  I've alerted site my server to take the site down.  Then
the process of reviewing each file for corrupted script - over 70 pages.

Thanks to those who alerted me.

73, Ed - KL7UW
http://www.kl7uw.com
     "Kits made by KL7UW"
Dubus Mag business:
     [hidden email]

______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

NK7Z
Hi Edward,

If your web site is hacked, and you are aware of it, and you are worried
enough to tell us to not view it, you should take it down!

--
Thanks and 73's,
For equipment, and software setups and reviews see:
www.nk7z.net
for MixW support see;
http://groups.yahoo.com/neo/groups/mixw/info
for Dopplergram information see:
http://groups.yahoo.com/neo/groups/dopplergram/info
for MM-SSTV see:
http://groups.yahoo.com/neo/groups/MM-SSTV/info


On Wed, 2014-08-27 at 08:18 -0800, Edward R Cole wrote:

> Please do not sign into my site as it is infected (home computer was
> hacked).  I've alerted site my server to take the site down.  Then
> the process of reviewing each file for corrupted script - over 70 pages.
>
> Thanks to those who alerted me.
>
> 73, Ed - KL7UW
> http://www.kl7uw.com
>      "Kits made by KL7UW"
> Dubus Mag business:
>      [hidden email]
>
> ______________________________________________________________
> Elecraft mailing list
> Home: http://mailman.qth.net/mailman/listinfo/elecraft
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:[hidden email]
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
> Message delivered to [hidden email]

______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

Peter Pauly
In reply to this post by Edward R Cole
Here's a free scanner that looks at your website for malware:

http://sitecheck.sucuri.net/results/www.kl7uw.com/

It identified the following:

ISSUE DETECTED DEFINITION INFECTED URL
Website Malware mwjs-include-suspicious?v14 http://www.kl7uw.com/kits.htm (
View Payload )
Website Malware mwjs-include-suspicious?v14 http://www.kl7uw.com/about.htm
( View Payload )
Website Malware mwjs-include-suspicious?v14 http://www.kl7uw.com/6m.htm (
View Payload )
Website Malware mwjs-include-suspicious?v14 http://www.kl7uw.com/600m.htm (
View Payload )
Website Malware mwjs-include-suspicious?v14 http://www.kl7uw.com/sat.htm (
View Payload )
Website Malware mwjs-include-suspicious?v14
http://www.kl7uw.com/eme-status.htm ( View Payload )


On Wed, Aug 27, 2014 at 12:18 PM, Edward R Cole <[hidden email]> wrote:

> Please do not sign into my site as it is infected (home computer was
> hacked).  I've alerted site my server to take the site down.  Then the
> process of reviewing each file for corrupted script - over 70 pages.
>
> Thanks to those who alerted me.
>
> 73, Ed - KL7UW
> http://www.kl7uw.com
>     "Kits made by KL7UW"
> Dubus Mag business:
>     [hidden email]
>
> ______________________________________________________________
> Elecraft mailing list
> Home: http://mailman.qth.net/mailman/listinfo/elecraft
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:[hidden email]
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
> Message delivered to [hidden email]
>
______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

Wes (N7WS)
In reply to this post by NK7Z
On 8/27/2014 9:53 AM, David Cole wrote:
> Hi Edward,
>
> If your web site is hacked, and you are aware of it, and you are worried
> enough to tell us to not view it, you should take it down!
>
What part of "I've alerted site my server to take the site down." can't you read?
______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

NK7Z
I understood it completely...  

What part of "YOU" should take it down did you not understand?  Your
site would have been removed sooner had YOU removed it, not asked a
third party to remove it.  Infected web sites need to be removed asap.

No offense was intended...  

--
Thanks and 73's,
For equipment, and software setups and reviews see:
www.nk7z.net
for MixW support see;
http://groups.yahoo.com/neo/groups/mixw/info
for Dopplergram information see:
http://groups.yahoo.com/neo/groups/dopplergram/info
for MM-SSTV see:
http://groups.yahoo.com/neo/groups/MM-SSTV/info


On Wed, 2014-08-27 at 13:33 -0700, Wes (N7WS) wrote:

> On 8/27/2014 9:53 AM, David Cole wrote:
> > Hi Edward,
> >
> > If your web site is hacked, and you are aware of it, and you are worried
> > enough to tell us to not view it, you should take it down!
> >
> What part of "I've alerted site my server to take the site down." can't you read?
> ______________________________________________________________
> Elecraft mailing list
> Home: http://mailman.qth.net/mailman/listinfo/elecraft
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:[hidden email]
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
> Message delivered to [hidden email]

______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

Edward R Cole
In reply to this post by Edward R Cole
Thanks for the helpful suggestions and several that initially alerted
me.  The host is ace.net and they have taken down the site (shortly
after I sent my warning to this list).  I have a simplified front
page up, now.  No links are present until I clear and restore the
objects of the links.

I've had a couple suggestions of on-line sw that could remove the
hacker, but that would require the website to stay active.  I'm
pretty sure my host will not want an outside site accessing their
internal files with a program.  But they have a good staff that is
working with me on this.  Their response to my alert to them was in
minutes of my contact.

This virus appears to redirect all links inside my website.  Links to
other sites do not appear affected.  .doc, jpg, .xls links also seem
fine.  Only kl7uw.com/xxxx.htm or .html are corrupted.

Unfortunately, the Alaska VHF-Up Group qsl.net website, which I act
as webmaster, was also hacked.  It is much simpler and all that I had
to do was upload uncorrupted html files to replace the bad ones.

Hacker read my FTP client passwords to access the websites.

73, Ed - KL7UW
http://www.kl7uw.com
     "Kits made by KL7UW"
Dubus Mag business:
     [hidden email]

______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

KC6CNN
CONTENTS DELETED
The author has deleted this message.
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

Wes (N7WS)
In reply to this post by NK7Z
Note that it was I who made the comment you're responding to, not Ed.

Wes  N7WS

On 8/27/2014 2:12 PM, David Cole wrote:
> I understood it completely...
>
> What part of "YOU" should take it down did you not understand?  Your
> site would have been removed sooner had YOU removed it, not asked a
> third party to remove it.  Infected web sites need to be removed asap.
>
> No offense was intended...
>

______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: www.kl7uw.com - Hacked

NK7Z
I realized that as soon as I hit send!  :)
--
Thanks and 73's,
For equipment, and software setups and reviews see:
www.nk7z.net
for MixW support see;
http://groups.yahoo.com/neo/groups/mixw/info
for Dopplergram information see:
http://groups.yahoo.com/neo/groups/dopplergram/info
for MM-SSTV see:
http://groups.yahoo.com/neo/groups/MM-SSTV/info


On Wed, 2014-08-27 at 19:37 -0700, Wes (N7WS) wrote:

> Note that it was I who made the comment you're responding to, not Ed.
>
> Wes  N7WS
>
> On 8/27/2014 2:12 PM, David Cole wrote:
> > I understood it completely...
> >
> > What part of "YOU" should take it down did you not understand?  Your
> > site would have been removed sooner had YOU removed it, not asked a
> > third party to remove it.  Infected web sites need to be removed asap.
> >
> > No offense was intended...
> >
>
> ______________________________________________________________
> Elecraft mailing list
> Home: http://mailman.qth.net/mailman/listinfo/elecraft
> Help: http://mailman.qth.net/mmfaq.htm
> Post: mailto:[hidden email]
>
> This list hosted by: http://www.qsl.net
> Please help support this email list: http://www.qsl.net/donate.html
> Message delivered to [hidden email]

______________________________________________________________
Elecraft mailing list
Home: http://mailman.qth.net/mailman/listinfo/elecraft
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:[hidden email]

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html
Message delivered to [hidden email]