Welcome to WebmasterWorld Guest from 220.127.116.11 , register , free tools , login , search , subscribe , help , library , announcements , recent posts , open posts Pubcon Website
The legit .htm just has my code. The .htm.aff_sa_bak has this script appended under the </html> tag
I tried to figure out what it was, why it was, or what I should do, but I was stumped. What's going on with this thing?
jessejump msg:368585 3:51 pm on Nov 25, 2005 (gmt 0)
Looks like hacking from Google search; alert your host. larryhatch msg:368586 4:28 pm on Nov 25, 2005 (gmt 0)
I googled up aff_sa_bak, and mostly got junk.
One site had some info, a blog for webmasters. The writer's site got hacked.
The aff_sa_bak URLs led to popup ads. Yes, contact your host right away.
The perps apparently break in to the server itself so they can mess with every site there. -Larry
Iguana msg:368587 4:33 pm on Nov 25, 2005 (gmt 0)
Thanks all! I deleted the offending files: no online troubles with the site. I alerted my host. I'll keep you posted.