What is a Malware attack - GoFuckYourself.com

Cherry7 · 11-04-2012, 02:43 AM

After wasting a week of my life cleaning up from a Malware attack I have been told;

The happen by forcing the FTP password

Then by weakness in the web design (but no explanation on what exactly.

I would have thought is would be easy to defend against multiple attempts to log in...

I was also told that the attack could come from the uploading or home computer but but anti virus and Microsoft's malware program failed to detect anything.

If it is a password problem is it true that

usealongsentenceasaspasswordinbetterthan

HgtSd55^&8

that it is the length is the stronger PW?

ottopottomouse · 11-04-2012, 04:04 AM

What FTP program do you use as some are quite easy to steal the password from?

suesheboy · 11-04-2012, 05:51 AM

Quote:

Originally Posted by ottopottomouse

What FTP program do you use as some are quite easy to steal the password from?

Interesting...such as?

helterskelter808 · 11-04-2012, 08:01 AM

I hope you people are just using "FTP" as a generic term, and you really mean SFTP or SSH, because FTP went out with Gopher and Archie. If you really are using FTP then stop, because it's not secure.

k0nr4d · 11-04-2012, 08:11 AM

Quote:

Originally Posted by suesheboy

Interesting...such as?

Filezilla stores all it's saved sites in an unencrypted xml file. I have a buddy who does german mainstream sites, and his computer got a virus. The virus sent out his filezilla xml file to some server and that server went in and added some iframe crap on every .html and .tpl file on all his client's servers. This happens less frequently on adult sites because the hosts in adult tend to firewall their shit, but there are other viruses and malware that log right in from your computer and do it - thus bypassing any firewall or anything.

It doesn't have to be *YOUR* computer that got virused - it could be a designer you hired, a programmer, a copywriter, an seo guy, or even a server admin who's computer was infected with soemthing and had your login data saved somewhere.

Cherry7 · 11-04-2012, 03:08 PM

Grim news, the irony is that we were having problems uploading large files and our host recommended Filezilla, and Fillezilla does work very well.

Lace · 11-04-2012, 04:21 PM

grumpy · 11-04-2012, 04:26 PM

Quote:

Originally Posted by k0nr4d

Filezilla stores all it's saved sites in an unencrypted xml file. I have a buddy who does german mainstream sites, and his computer got a virus. The virus sent out his filezilla xml file to some server and that server went in and added some iframe crap on every .html and .tpl file on all his client's servers. This happens less frequently on adult sites because the hosts in adult tend to firewall their shit, but there are other viruses and malware that log right in from your computer and do it - thus bypassing any firewall or anything.

It doesn't have to be *YOUR* computer that got virused - it could be a designer you hired, a programmer, a copywriter, an seo guy, or even a server admin who's computer was infected with soemthing and had your login data saved somewhere.

thats why i use ipswitch ws_ftp professional

SilentKnight · 11-04-2012, 04:43 PM

Quote:

Originally Posted by Cherry7

After wasting a week of my life cleaning up from a Malware attack I have been told;

The happen by forcing the FTP password

Then by weakness in the web design (but no explanation on what exactly.

I would have thought is would be easy to defend against multiple attempts to log in...

I was also told that the attack could come from the uploading or home computer but but anti virus and Microsoft's malware program failed to detect anything.

If it is a password problem is it true that

usealongsentenceasaspasswordinbetterthan

HgtSd55^&8

that it is the length is the stronger PW?

We had a major malware issue here recently also - but it had nothing to do with FTP. We got the Ukash virus, which seemed to mutate into various forms. It busted through both our anti-virus and firewall and literally locked the system up.

It took me three days to completely eliminate it. No permanent damage, just major annoying with the downtime.

rock-reed · 11-04-2012, 09:53 PM

Try using Secure FTP (SFTP) to feel more secure.

NaughtyRob · 11-04-2012, 09:57 PM

The Internet....

Cherry7 · 11-05-2012, 01:52 PM

So it could be Filezilla, it could be our computer, it could be our site PW was hacked, it could be a weakness in our website...

alex.missyouth · 11-05-2012, 01:57 PM

My advice is to use SFTP and a strong password with capitals and non capital letters, numbers and symbols.

Cherry7 · 11-06-2012, 12:31 PM

Quote:

Originally Posted by alex.missyouth

My advice is to use SFTP and a strong password with capitals and non capital letters, numbers and symbols.

I was reading it is the length of the password that is more important and a password like

thisisreallyeasytorememberasapasswordforexample

is better than

TerD5$$£&*H

helterskelter808 · 11-06-2012, 12:56 PM

^ Why not just make the second one longer.

HomerSimpson · 11-06-2012, 01:05 PM

Quote:

Originally Posted by k0nr4d

Filezilla stores all it's saved sites in an unencrypted xml file. I have a buddy who does german mainstream sites, and his computer got a virus. The virus sent out his filezilla xml file to some server and that server went in and added some iframe crap on every .html and .tpl file on all his client's servers. This happens less frequently on adult sites because the hosts in adult tend to firewall their shit, but there are other viruses and malware that log right in from your computer and do it - thus bypassing any firewall or anything.

It doesn't have to be *YOUR* computer that got virused - it could be a designer you hired, a programmer, a copywriter, an seo guy, or even a server admin who's computer was infected with soemthing and had your login data saved somewhere.

exactly...
so, the solution is

1. Use Total Commander because it has password encryption (versions > 7.5)

2. Use FileZilla portable edition from PortableApps.com because then the virus doesn't know where filezilla is installed. All those viruses scan "c:/Program Files/" folder for installed applications or search the registry...

So, by using Portable Applications you will hide from possible attacker information that you are using that software... You can also put that on USB drive and carry with you or store it on Dropbox and use it on any computer, wherever you are...

johnny o · 11-06-2012, 01:10 PM

this link says your long password is better, see for yourself:
http://howsecureismypassword.net/

Cherry7 · 11-07-2012, 05:11 AM

Quote:

Originally Posted by johnny o

this link says your long password is better, see for yourself:
http://howsecureismypassword.net/

The intersting thing about that is that it seems to be 99% about length....

CurrentlySober · 11-07-2012, 05:17 AM

Quote:

Originally Posted by Cherry7

The intersting thing about that is that it seems to be 99% about length....

Surprised?

Thats what all women really think, but simply wont admit...

rowan · 11-07-2012, 05:31 AM

Quote:

Originally Posted by Cherry7

The intersting thing about that is that it seems to be 99% about length....

With brute forcing longer passwords will take exponentially longer to crack.

A single password with uppercase letters only will require up to 26 attempts to crack, but increase that to two and we're now at 676 (26 x 26)... go up to 10 and it's a number I'd have difficulty comprehending... 141,167,095,653,376

Of course there's no point having a "good" password if you're transmitting it cleartext via FTP, or you have something on your desktop or server that is catching the password as it's used.

idolbucks · 11-07-2012, 11:47 AM

Quote:

Originally Posted by Cherry7

The intersting thing about that is that it seems to be 99% about length....

This site explains it a bit more in depth

https://www.grc.com/haystack.htm

Example password I typically use 100 char + High ANSI characters

„2?“¶=ŠQƒHÁ[}ƒÈš!ûmÖbaÍµRÑXDx×Ãê…n†!±ÖMMù‰HæJÚáÁêÞ°1öèük5þ‚;7b ÞÏäúC$w÷VÁ~¥¶ÖÆVú‡‡´Í¨üø7«·æK¯‹ÆÀhYœÏ

Massive Cracking Array Scenario:
(Assuming one hundred trillion guesses per second) 1.81 hundred million trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion centuries

Cherry7 · 11-07-2012, 12:35 PM

Quote:

Originally Posted by idolbucks

This site explains it a bit more in depth

https://www.grc.com/haystack.htm

Example password I typically use 100 char + High ANSI characters

?2??¶=?Q?HÁ[}?È?!ûmÖbaÍµRÑXDx×Ãê?n?!±ÖMMù?HæJÚáÁêÞ°1öèük5þ?;7b ÞÏäúC$w÷VÁ~¥¶ÖÆVú??´Í¨üø7«·æK¯?ÆÀhY?Ï

Massive Cracking Array Scenario:
(Assuming one hundred trillion guesses per second) 1.81 hundred million trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion trillion centuries

But try and remember that. If you paste it in or store it another problem.But password such as

Thisisveryeasytorememberasitisinwordsbutverylong

seems to be the way to go

11-04-2012, 02:43 AM	#1
Cherry7 Confirmed User Join Date: Aug 2005 Location: UK Posts: 3,564	What is a Malware attack After wasting a week of my life cleaning up from a Malware attack I have been told; The happen by forcing the FTP password Then by weakness in the web design (but no explanation on what exactly. I would have thought is would be easy to defend against multiple attempts to log in... I was also told that the attack could come from the uploading or home computer but but anti virus and Microsoft's malware program failed to detect anything. If it is a password problem is it true that usealongsentenceasaspasswordinbetterthan HgtSd55^&8 that it is the length is the stronger PW? __________________ My Neighbour Butterfly PORN-The Musical The Long Goodbye Cinema Erotique

11-04-2012, 04:04 AM	#2
ottopottomouse She is ugly, bad luck. Industry Role: Join Date: Jan 2010 Posts: 13,177	What FTP program do you use as some are quite easy to steal the password from? __________________ ↑ see post ↑ 13101

11-04-2012, 03:08 PM	#6
Cherry7 Confirmed User Join Date: Aug 2005 Location: UK Posts: 3,564	Grim news, the irony is that we were having problems uploading large files and our host recommended Filezilla, and Fillezilla does work very well. __________________ My Neighbour Butterfly PORN-The Musical The Long Goodbye Cinema Erotique

11-04-2012, 04:21 PM	#7
Lace Too lazy to set a custom title Industry Role: Join Date: Mar 2004 Posts: 16,116	__________________ Your Paysite Partner Strength In Numbers! StickyDollars \| RadicalCash \| KennysPennies \| HomegrownCash

11-04-2012, 09:53 PM	#10
rock-reed Confirmed User Join Date: May 2005 Posts: 1,892	Try using Secure FTP (SFTP) to feel more secure. __________________ --- Ethnic niche? Black-Asian-Latina ? Contact me and lets talk traffic. rockreed@ that thing they call the google mail When you E-mail Me, PLZZZZ make the Subject Title: >>>>>> GFY! So I do not lose you in Spam.

11-04-2012, 08:01 AM	#4
helterskelter808 So Fucking Banned Industry Role: Join Date: Sep 2010 Posts: 3,405	I hope you people are just using "FTP" as a generic term, and you really mean SFTP or SSH, because FTP went out with Gopher and Archie. If you really are using FTP then stop, because it's not secure.

11-04-2012, 09:57 PM	#11
NaughtyRob Two fresh affiliate progs Industry Role: Join Date: Nov 2004 Location: Inside teen pussy Posts: 29,602	The Internet.... __________________ [email protected] Skype: 17026955414 Vacares Web Hosting - Protect Your Ass with Included Daily Backups

11-05-2012, 01:52 PM	#12
Cherry7 Confirmed User Join Date: Aug 2005 Location: UK Posts: 3,564	So it could be Filezilla, it could be our computer, it could be our site PW was hacked, it could be a weakness in our website... __________________ My Neighbour Butterfly PORN-The Musical The Long Goodbye Cinema Erotique

11-05-2012, 01:57 PM	#13
alex.missyouth Confirmed User Industry Role: Join Date: Sep 2012 Posts: 1,870	My advice is to use SFTP and a strong password with capitals and non capital letters, numbers and symbols. __________________ skype: descargasweb

11-06-2012, 12:56 PM	#15
helterskelter808 So Fucking Banned Industry Role: Join Date: Sep 2010 Posts: 3,405	^ Why not just make the second one longer.

11-06-2012, 01:10 PM	#17
johnny o Confirmed User Industry Role: Join Date: Jul 2006 Location: los angeles Posts: 825	this link says your long password is better, see for yourself: http://howsecureismypassword.net/ __________________ http://candydreams.com info[at]candydreams[dot]com