How To Remove Google Search Virus Warning Alert? This Site May Harm Your Computer

August 23, 2008 · Filed Under Computer, Internet, Security · Comment 

How To Remove Google Search Virus warning Alert? This Site may harm Your Computer

If your website is facing similar problem while searching then you need to make sure that..

1) Your ‘.htaccess’ file hacked.

Some one hacked your ‘.htaccess’ file and added malicious redirection codes in to it. What it dose means! It redirects the Google or any other search engine request to malicious domains, so for this you can do one thing like Remove all ‘.htaccess’ which are infected or replace it with original one.

2) Make sure your website is not affiliated with any Mallware related website or activates.

Your site may infected by iframe attack where hackers inserted JavaScript iframe codes into your first or last line of index pages of every folders. This calls an external malicious page in to visitor’s computer and loads nasty programs. The codes will be inserted in encoded format, so look like “%20%77%69%6e” in a file. You need to clean this.

Once you have reviewed your website and are sure it is clean, you can submit a request for re-review your site with google manully as follows.

Using Google Webmaster Tools. (Note: you need to verify site ownership to see this information).

1. Sign in to Webmaster Tools with your Google account.
2. On the Dashboard, select the site you want.
3. On the Overview page, click Request a review and follow the instructions.

After this Google will review your website manually and, Once they will make sure that it doesn’t host or distribute any type of Malware, they will remove the identification from search results and it will re-index it.

Update:-

I forgot to tell the Reason and Precaution for this problem, here it is …

This can happen for various reasons like:

- poor/compromised account/FTP password, which allows hackers to guess the password [or use brutforce tools] and get unauthorized access.
- user’s computer infected by viruses, which is controlled by hackers. In this situation, customer’s uploads also get infected.
- poor scripts, which allows hackers to insert various malformed queries and remotely execute the code and perform intended action
- Virus effected theme selection for the application
- Installing application which are downloaded form third party sites; mainly not genuine sites.

You will have to ensure that:

- generate a strong password combination [for account, ftp, database etc]
- scan local computer with good antivirus, anti spy ware programs and clean bad programs.
- keep the software up-to-date with vendors/developers, and seek their support/forums for any known vulnerabilities/fixes/workarounds available.

  • Digg
  • Blogsvine
  • IndianPad
  • Propeller
  • StumbleUpon
  • Reddit
  • Facebook

Vulnerability in iPhone - Vulnerability In iPhone Mail Application

July 27, 2008 · Filed Under Internet, Mobiles, Security · Comment 

The iPhone’s Mail and Safari browser applications  could leave owners to a URL spoofing vulnerability, which may allow attackers to conduct phishing attacks against the phone’s users.

By creating a specially crafted URL, and sending it via an e-mail, an attacker can convince the user that the spoofed URL, shown in the mail application, is from a trusted domain, such as a bank, PayPal or a social network.

When the iPhone user clicks on the URL, the Safari browser will be opening the spoofed URL, but still be viewed by the victim as if it is from a trusted domain.

The iPhone user will then be open to phishing attacks as they will enter private information, such as passwords, because they believe they are on the real site and not a fake.

Security researcher Aviv Raff also says. In addition, a security design flaw means the iPhone’s Mail application is also spammable.

iPhone Mail and Safari on firmware 1.1.4 and 2.0 are affected by this vulnerability. Earlier versions may also be affected, said Aviv Raff.

  • Digg
  • Blogsvine
  • IndianPad
  • Propeller
  • StumbleUpon
  • Reddit
  • Facebook

Mozilla Thunderbird with Nine Security Vulnerabilities:Fixed

July 26, 2008 · Filed Under Computer, Internet, Security, Software · Comment 

Mozilla patched nine security vulnerabilities in Thunderbird.

Thunderbird 2.0.0.16, which was added to Mozilla’s download servers also quashes nine bugs, including one that was patched in Firefox last week, the company’s open-source browser. The remainder fix flaws that were first addressed in early July when Mozilla updated Firefox to version 2.0.0.15.

Seven of the nine bugs were rated moderate by Mozilla, the second-lowest of the four rankings in its threat system. The other two were low.

The bug patched in Thunderbird 23rd Jul that was fixed in Firefox before it was in the browser rendering engine’s CSSValue array data structure. According to Mozilla, the vulnerability could be used by hackers to force a crash, and from there, run malicious code. Several other just-patched Thunderbird vulnerabilities could also be used by attackers to execute code remotely.

Thunderbird 2.x, like its browser sibling, is on the way out. Most of Mozilla’s attention is now on Thunderbird 3.0, which has been available as an Alpha 1 preview for more than two months.

Users can download Thunderbird in versions for Windows, Mac OS X and Linux from the Mozilla site, the e-mail client’s built-in updater or wait for the automatic update notification.

reed
  • Digg
  • Blogsvine
  • IndianPad
  • Propeller
  • StumbleUpon
  • Reddit
  • Facebook

How to Monitor Websites and Web Services Live for Free from PC

June 29, 2008 · Filed Under Computer, Internet, Linux, Security, Software · Comment 

NagiosYes you can Monitor Websites and Web Services Live for Free from PC Using Nagios. Nagios is a host and service monitoring tool  designed to inform network problems. When problems are encountered, the Nagios daemon can send notifications out to you in a variety of different ways (email, instant message,  etc.). Current status information, historical logs, and reports can all be accessed via a web browser too.

Features of Nagios include Monitoring of network services like SMTP, POP3, HTTP, IMAP, PING, FTP, etc. This features also can be used to monitor your websites which are hosted in third party hosting servers, that’s especially from home/office PC itself!!

Setting up Nagios for your domains:

1) Installation process

You can use following commands to install components needed.

  • Installing Apache/httpd and Nagios under Fedroa Core/Cent OS Linux

# yum install httpd
# chkconfig httpd on
# /etc/init.d/httpd start
# yum install nagios nagios-plugins nagios-plugins-all

  • Debian, Ubuntu Linux httpd/Apache and Nagios installation

# apt-get install apache2
# /etc/init.d/apache2 start
# apt-get install nagios-text nagios-plugins nagios-images
or
# apt-get install nagios2 nagios-plugins nagios-images

  • If you don’t have yum/apt. Install stable apache/nagios by downloading from following sites

Apache:- http://httpd.apache.org/
Nagios:- http://www.nagios.org/download/#stable

Now we done with Installation next….

2) Configuring Nagios:

  • Add a custom directory for your *.cfg files

# mkdir /etc/nagios2/mysite

  • Edit /etc/nagios2/nagios.cfg and edit the following path

Default path cfg_dir=/etc/nagios2/conf.d to
cfg_dir=/etc/nagios2/mysite

  • Create your own configuration files inside the defined directory that is In /etc/nagios2/mysite; add the following files.

- contacts.cfg: Defines the people who will receive the alerts in case of a problem.
Here you need to change e-mail ID and Pager ID.

define contact{
contact_name                    Admin
alias                           Administrator Name
service_notification_period     24×7
host_notification_period        24×7
service_notification_options    w,u,c,r
host_notification_options       d,u,r
service_notification_commands   notify-by-email,notify-by-pager
host_notification_commands      host-notify-by-email,host-notify-by-epager
email                           admin@yourdomain.com
pager                           11111111@pager.yourdomain.com
}

define contactgroup{
contactgroup_name       admins
alias                   Nagios Administrators
members                 Admin # contact_name should be added here
}

- host.cfg: Defines the url’s that will be monitored.

##You can add as many as url’s need like bellow
define host{
host_name  jithesh.com
alias      Jithesh
address    www.jithesh.com
use        generic-host
}

define host{
host_name  jithonline.com
alias      JithOnline
address    www.jithonline.com
use        generic-host
}

#### Hostgroup_name ###
define hostgroup {
hostgroup_name  all
alias           All Servers
members         *
}

# A list of your servers
define hostgroup {
hostgroup_name    servers
alias           Servers
members         jithesh.com, jithonline.com  #Add all host_name here
}

- services.cfg: Defines the services that will be monitored for each URL.

## Hostgroups services ##
define service {
hostgroup_name                 servers
service_description             HTTP
check_command                 check_http
use                             generic-service
notification_interval           0
}

define service {
hostgroup_name                 servers
service_description             PING
check_command                 check_ping!100.0,20%!500.0,60%
use                             generic-service
notification_interval           0
}

define service {
hostgroup_name                 servers
service_description             FTP
check_command                 check_ftp
use                             generic-service
notification_interval           0
}

define service {
hostgroup_name                 servers
service_description             POP
check_command                 check_pop
use                             generic-service
notification_interval           0
}

define service {
hostgroup_name                 servers
service_description             IMAP
check_command                 check_imap
use                             generic-service
notification_interval           0
}

define service {
hostgroup_name                 servers
service_description             SMTP
check_command                 check_smtp
use                             generic-service
notification_interval           0
}

- templates.cfg: Defines some templates like the generic url, generic service and a lot of others custom templates.

In the default installation you will find files named generic-host_nagios2.cfg, generic-service_nagios2.cfg and there might be others. Just with copy and paste them into /etc/nagios2/mysite directory it will work OK. Anyway, I prefer to put the definitions on each of them into a single file called templates.cfg, but that’s a personal preference.

- timeperiods.cfg: Defines time periods which are valid for checks, notifications, etc.

The default configuration file is OK, so just copy and paste it from /etc/nagios2/conf.d/timeperiods_nagios2.cfg to /etc/nagios2/mysite/timeperiods.cfg.

So we have done with all configuration stuffs.

3)  Restart the Nagios service:

# /etc/init.d/nagios2 restart
If there is any configuration error Nagios will tell you where it is when you attempt to restart the service.

4) Monitor your URLs

By opening Nagios in browser
http://<nagios_server_host>/nagios2
user name:-nagiosadmin
passwd:-<set passwd> Most of the case root passwd itself

If you still having problems, don’t hesitate to post comment.

  • Digg
  • Blogsvine
  • IndianPad
  • Propeller
  • StumbleUpon
  • Reddit
  • Facebook

Next Page »