Front Page Hijacked

[mrtourette]

Showing this:

[eFestivals]

I'm currently looking into this.

But at first glance there don't appear to be any changed files on the server, so I'm guessing that it's either happening via the adverts-code or it's your machine that's become infected.

[eFestivals]

Could you please tell me if it's happening every time you access the front page, just sometimes, or that you can't repeat the issue?

[Diamond Solitaire]

I'm getting it as well. Comes up every time I try to access the front page

[eFestivals]

could someone please do "view source" on that front page and email (webmaster@efestivals.co.uk) the source code to me in a text file, please?

Could people also tell me what operating system and version (windows xp, windows 7, etc) and browser and version (Internet Explorer 8, Firefox 23, etc) they're using?

[mrtourette]

Done

[eFestivals]

I've replaced all of the code for the main part of the website, so there's now only one way that it could still happening....

So is it still happening?

Please let me know asap.

[mrtourette]

Yes, and to other pages as well (have e-mailed details)

[eFestivals]

Yes, and to other pages as well (have e-mailed details)

eh? I've not had an email...?

[eFestivals]

can someone please tell me if it's still happening on the homepage now (have just changed something)...?

http://www.efestivals.co.uk

[mrtourette]

Still happening

[eFestivals]

I just don't get how it's happening - there's absolutely nothing within the website code which could make that appear .... and yet I believe it's happening, cos google has indexed what you're reporting.

[eFestivals]

what about now (on just the frontpage, again)?

[mrtourette]

Still happening

[Dog Burger]

Yeah, happening to me too.

[theboytaff]

Still happening Neil. It can't be an infected machine either, as I'm logging on in work and without me going into details of where I am there is absolutely no chance this terminal is at fault.

Hope you get it sorted mate, these things can get seriously frustrating when trying to resolve it.

[eFestivals]

Still happening Neil. It can't be an infected machine either, as I'm logging on in work and without me going into details of where I am there is absolutely no chance this terminal is at fault.

Hope you get it sorted mate, these things can get seriously frustrating when trying to resolve it.

yeah, I know it can't be infected user's machines, as google wouldn't have indexed the dodgy text if it was.

But what's really feckin' weird is that no one I've had check it can't replicate the problem, and the amount of reports about it being made are too small for it to be affecting many people.

Edited October 2, 2013 by eFestivals

[eFestivals]

without me going into details of where I am there is absolutely no chance this terminal is at fault.

yeah, it's well known that there's a belief of everything being 100% proper there for all sorts of different things at that place.

It's not right for those other things so I doubt it right fort their 'puters either. But anyway, I do know that users computers is not the problem in this instance.

--------

BTW, there's not actually anything risky with the "false" page - it's just some text and some links.

Edited October 2, 2013 by eFestivals

[eFestivals]

is the problem still there now...?

[mrtourette]

Seems fine, but I'm using Firefox now rather then IE.

[eFestivals]

thanks ... fingers crossed it's sorted.

[mrtourette]

Back at work using IE and it's still happening

[eFestivals]

Back at work using IE and it's still happening

can you please do a ctrl-F5 to force a full refresh and let me know if it's still bad?

[eFestivals]

and do you have any plugins installed in that browser?

[mrtourette]

Nothing out of the ordinary (Java, Adobe). Due to working for 'the man' any kind of downloading or installing plug-ins or programs is heavily restricted so it's just the base version of IE8 without any bells or whistles.