Be careful about others' fixes

As an example, I recently saw a "solution" for Iframe infection that looked like this:

find / -type f -mtime -10 | xargs grep -l '<iframe'| xargs perl -pi -e 's/^.*\<iframe.*$/ /g'

 

What is wrong with this? Oh, just about everything.

1) If you don't even know where to put this code then STOP IMMEDIATELY and CONTACT US.

2) The "/" character tells the script to run on absolutely all files stored on your computer, or on the operating system of the server. Very useful way to corrupt data on your home computer or the server, or get your SSH access disabled.

3) Someone saw that in their attack the IFrame code was on a separate line. That line on most attacked websites will actually contain other code as well. What a perfect way to irreversibly (if without a backup) corrupt code of your pages.

4) Most attacked websites have several different types of IFrame and obfuscated Java infections, and this script will not clean up all of them.

5) A knowledgeable person knows that you first diagnose the exact problem, and then fix accordingly. We are someone who will help.

6) This script will not work with obfuscated Java script, especially one broken over several lines.

7) Due to idiosyncrasies of Linux, this script will break down for many, many reasons. Only someone knowledgeable with Linux would know how to use that command properly.

 

You are here: Home » Services available » Hacked Website Repair » Be careful about others' fixes