Mark Monitor

[totally]

Hello Forum,

I'm another first time poster and need some advice. The following e-mail tells me something is up with my site. A site that is inactive by the way. Several of the guys from MM in Maryland have called me to rectify the problem. I went to my Admin panel and found a file from 4/29/08, clicked on it to delete it and I got an error message that says I need to "please set the right user permissions" on /home/......... How do I do that? I'm sort of battling some other demons here like being broke and having a bad heart etc.....I don't need more weight put on my shoulders. So.....any kind of words of advice would be welcome. Totally

 

 

 

 

 

From: Maroof Farhat <[email protected]>

Subject: Phish site on your network (75.126.189.184) (MM #39391)

Date: Fri, 2 May 2008 09:04:01 -0400

To: <[email protected]> <[email protected]>

CC: <[email protected]>

Printer Friendly Version Attachments: 0

DeletePreviousNextCloseReplyReply AllForward

--------------------------------------------------------------------------------

 

To Whom It May Concern:

 

It has come to our attention that you are hosting a fraudulent "phish"

website that is attempting to steal account information from customers of

Wells Fargo. The URL of the fraudulent site is as follows:

 

http://anytimegiftbaskets.biz/settings/plu.../wemessage.html

 

The IP address hosting this phish is 75.126.189.184.

 

Please investigate and shut down this site immediately.

 

Should you have any questions, please call us at +1-301-515-0820.

 

Please include the ticket number, MM# 39391, in all communications on this issue.

 

Thank you,

 

Maroof Farhat

MM Ops Center

 

-----

MarkMonitor is researching phishing attacks. Please complete a

two-minute survey about this phishing incident to help us protect

Internet users. Survey link: http://www.markmonitor.com/phishingresearch

<http://www.markmonitor.com/phishingresearch>

 

 

 

--------------------------------------------------------------------------------

DeletePreviousNextCloseReplyReply AllForward

 

 

 

Select a Folder deleted items Drafts Sent Items

[FIMBLE]

Check you directories for any folder or file you do not recongise, i bet some one has gotten into your directories and added a folder.

Its what these scum do.

[FIMBLE]

You need to delete the folder called settings, it hiding the pages for the Phishing site

Most important is that you change you password for you Cpanel

 

[totally]

Fimble,

Thanks for the help. I went into my cPanel and was able to delete the offender. Hopefully, this will stop those guys from MM calling me. I appreciate the headsup about my password,too....taken care of..

Thanks, Totally