Snitz Forums 2000
Snitz Forums 2000
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 Help Groups for Snitz Forums 2000 Users
 Help: General / Classic ASP versions(v3.4.XX)
 Possible Hack?
 New Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

richfed
Average Member

United States
999 Posts

Posted - 03 January 2015 :  15:29:37  Show Profile  Visit richfed's Homepage  Reply with Quote
Not sure what this is or where it came from. It appeared sometime in the past 24 hours on my messageboard --

http://www.mohicanpress.com/messageboard/default.asp The very top line says,
quote:
Wishing You a Happy, Healthy and Prosperous 2015! Click Here to Visit


The "Click Here" part leads to http://www.clkmg.com/bharper/beagleblog

I did not put that there. I checked, and even replaced my default.asp file. To no avail. Checked inc_header, inc_header _short, and inc_ header_shortest. Don’t see anything. Don’t think it is those files anyway. The message appears only on default.asp, as far as I can see.

Seems harmless, but how the heck did it get there? No other abnormalities, no new posters of late. I have contacted my ISP and they are looking into it, but I thought that maybe one of you could offer some insight.

Any ideas?

IE 11:



Firefox 34+:



Rich
[size=1]A Complete Idiot's Guide to MOD Implementation || On the Trail of the Last of the Mohicans[/size=1]

ruirib
Snitz Forums Admin

Portugal
26364 Posts

Posted - 03 January 2015 :  18:35:35  Show Profile  Send ruirib a Yahoo! Message
The bar comes from attentionmonkey.com. It seems to be added to the page from a file named hcodea.js, which seems to be included at line 366 in default.asp.

These are the file contents:


<!-- Begin
if ((navigator.appName == "Microsoft Internet Explorer") && (parseInt(navigator.appVersion) >= 4)) 	{
document.write('<script src="http://attentionmonkey.com/bars/359/352.php"></script></script>');
    		}
	    else {
document.write('<script src="http://attentionmonkey.com/bars/359/352.php"></script>');
		}
// end -->


Snitz 3.4 Readme | Like the support? Support Snitz too
Go to Top of Page

Davio
Development Team Member

Jamaica
12217 Posts

Posted - 03 January 2015 :  18:40:29  Show Profile
This code, from your default.asp source is producing the message:

<!-- Begin Code Amber Ticker code. -->
<P ALIGN=CENTER>
<SCRIPT LANGUAGE="JavaScript1.2" src="http://www.codeamber.org/js/hcodea.js">
</script>
</P>
<!-- end of Code Amber Ticker code (c)Copyright codeamber.org 2002, 2003, 2004-->


EDIT: Ok, rui beat me to it.

Support Snitz Forums

Edited by - Davio on 03 January 2015 18:40:58
Go to Top of Page

richfed
Average Member

United States
999 Posts

Posted - 03 January 2015 :  19:52:33  Show Profile  Visit richfed's Homepage
ruirib, I could not find that code or .js file at line 366, or anywhere else. However, I removed the amber alert code - which I've had there for years - and, as Davio said - the bar went away.

Thanks, guys!
Go to Top of Page

richfed
Average Member

United States
999 Posts

Posted - 03 January 2015 :  19:58:34  Show Profile  Visit richfed's Homepage
Oh, I see the hcodea.js now ....

Thanks, again!!!
Go to Top of Page

Davio
Development Team Member

Jamaica
12217 Posts

Posted - 03 January 2015 :  21:26:40  Show Profile
Yeah, the amber alert code had the hcodea.js rui was referring to.

Rui's line 366 more than likely referred to the line 366 in the HTML output your default.asp produced, since he doesn't have access to your default.asp file.

Glad you got it sorted out tho.

Support Snitz Forums
Go to Top of Page

ruirib
Snitz Forums Admin

Portugal
26364 Posts

Posted - 04 January 2015 :  07:39:41  Show Profile  Send ruirib a Yahoo! Message
Yes, that would be line 366 in the produced HTML, which would include any includes done in default.asp. As David stated, all I could access was the HTML from your site when visiting default.asp.


Snitz 3.4 Readme | Like the support? Support Snitz too
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic
 Printer Friendly
Jump To:
Snitz Forums 2000 © 2000-2021 Snitz™ Communications Go To Top Of Page
This page was generated in 0.24 seconds. Powered By: Snitz Forums 2000 Version 3.4.07