Bizzare website problem

Post #208,744 by JayMehaffey 5/26/05 5:56:23 PM 5/26/05 7:50:17 PM Reply	Bizzare website problem One of our clients called us today about there being porn on his website. We went through the site and couldn't find anything. Client insists that it is, so my boss goes over to the client's site to see and on the client computer it is wrong. Now that I knew which files exactly where the problem, I pulled them from the web server and they are fine on the web server. Somehow the image is being replaced someplace between the server and display. I'm guessing some sort of weird virus or porn spammer on the clients computer but that is just a guess. The file name as it appears on the client computer is correct, but the contents have been replaced with something else. Anybody heard of anything like this? Jay Edit:spelling Edited by JayMehaffey May 26, 2005, 07:50:17 PM EDT Expand All History
Post #208,751 by ChrisR 5/26/05 6:52:50 PM 5/26/05 7:02:46 PM Reply	Spyware works under the same principle When you ask for a web page on the browser, what the spyware actually does is tack that url as data onto the end of their website. So everything is effectively routed through another server acting as an intermediary. Because you are actually talking to a single server for all requests, that server can present the pages in any way it wants (advertizing, porn, illegal lrpd's, etc).... So the trick is to find who's coopted the browser. Edited by ChrisR May 26, 2005, 07:02:46 PM EDT Expand All History
Post #208,774 by dws 5/26/05 11:21:47 PM Reply	Proxy or DNS hijack Check their PCs to see if they have mysterious proxy server settings, or DNS entries that look wrong. Either might have been hijacked.

Welcome to IWETHEY!