Blackcat

Exactly! I forgot to switch the style and lost at least two weeks of work in personalized mods I hate myself when l don't look at the instructions carefully!!!

Ok. I've tried to find where this malicious script has been inserted. I could not find it Moreover in my first page source code (you mean html, right? ) it does not appear anymore. I took a look also in my templates folder, in the include folder but nothing.

Done

You're right!!! I did not put this script in my header... And, honestly, l did not make my search in the header, but just in the page body ( ). As soon as my Cpanel works again (now l think something strange is happening, l have an error code "License File Expired" ) l will delete it. Thank you again

David... no words for your great answer, except an enormous THANKYOU!!!!! Well, now users complaining with forum are two. Both have problems with the home page (http://bloggy.biz/board), firewalls and antivirus get crazy, programs try to be installed on pc and so on. I made a search on the php codes, but l have not been able to find anything regarding hidden links

Absolutely YES!!!

Hi Thomas! How are you? Well, l double checked as your linked thread suggests, but found nothing, even in the source code of index php file Really don't know where else to look, to find any answer

Today three strange things happened on my blog (http://blackcat.bloggy.biz) 1- The folder /archive/images had become public (the images were not supposed to be shown in a list, even hotlink was used to forbid the usage of bandwidth of my domain) 2- An user made a complaint about the forum (http://bloggy.biz/board) saying that "in at least three or four moments, a trojan tried to enter my pc, the so called ByteVerify that exploits java of the forum to attack a computer". According to my experience, PhpBB does not use any java, am l right? Should l think it is a problem of this user only (in her pc, maybe)? 3- Another user, exploring the folder abovementioned, the one suddenly become visible to public, told that "my firewall informed me that an application called m00 was attempting to access internet. I never saw this .exe before, but l noticed it was created on my desktop in the moment l opened the folder. I tried to delete it, but it was impossible. This application tried further to access l don't know which process, so l denied access to it and finally deleted m00. There has been another problem, my task manager: l used it to close the explorer page opened to see your images, not responding. Everything has disappeared, even taskbar. Even restarting the pc nothing improved, l has been obliged to reboot it loading the last known working configuration" I really don't know what's happening: my Norton Internet Security and Personal Firewall did not find anything suspicious. Could you maybe help me?

I attended the third year of Law and Finance University in Italy, but quitted to go working, as l was really tired of study Now l own a Mercedes Benz after sale point in Milan, Italy. I am webmaster and singer in my free time

Good luck Ty, let us know your results (sure, they'll be great! )

Welcome to TCH! I host my weblogs at TCH since March 2003 and they are the fastest italian weblogs. TCH rulez

Always the best!!! Already done everything l needed, thanks a lot

I am a bit worried because becoming a mother made me forget lot of detalis i.e. l don't remember the mail used in the payment of my subscription to TCH, if it was the old one (no longer active) or the new one, the one in CPanel.... should l submit a ticket? Moreover l would like to upgrade from Silver to Deluxe: who must l inform? Are there any "blackout" times if l change plan? Thanks for all your answers

Wow! There are tons of fonts over there!!! I actually don't know the name of the font, maybe that "bobby socks" is the most suitable... but l can't find it in the sites you linked. Anyway, l'm sure l'll find some nice fonts to create the banner for the sock site l am building. Thanks a lot again

Ehm... Thomas please forgive my "Italian-English" l did not find other words to express the meaning... :D Great archive, Bruce! Thanks Now l'll browse it

This is the usual weird question of Black Cat... can anyone give me a link where I can find socks fonts? I mean, fonts made with socks (I always get the weirdest sites to build... )

Alexander thanks you all with hugs and kisses

So l SHOULD worry if someone else accessed password protected areas of my website. And to know WHAT he visited or how he/she logged in and relating ip, is it possible? Better to open a ticket? With my logs can l discover something useful?

Today l feel like the "shouters" of the medieval age, people shouting all over cities announcing war, real weddings or whatever. Today is my first year as mum. I am telling everybody it's my baby's birthday My little Alexander is almost a man. He walks, eat by himself, already speak some easy words... see him growing is one the most astonishing experience. So... l'm happy. A happy mother Wanted to share my happiness with you

I've taken a look on Awstat website, to find out further explanation but, as maybe l am a bit too tired l could not find what l was lookin for. When, on Awstat page, l find this description: "Authenticated users (Top 10)" what does it mean? People that log on to my cpanel? To my MT installation? To my Awstats? Assuming that only me, neither my husband, has permission and password to log on website or cpanel, should l be worried to find as Authenticated users mr John Smith, Jack Green or whoever? Authenticated to what?? Thank you for the patience to read and explain this pooor tired cat what's happening

Thank you Lisa! I have eight different weblogs under my domain and it would be terrible to lose all datas. There is this strange trend in Italy... you know we "latins" are strange guys...

I noticed a strange trend in all MT italian blogs in the "ring" l am. Once a week, an hacker choose a blog, enter in its server and delete everything. He/she erases MT and install wordpress, sending a password to the old owner of the blog. This may sound incredible, but it is true. Now l am a bit worried because l noticed in my awstats 2 logins from authenticated users l never knew, with some traffic in it. I am webmaster of all the domain (http://bloggy.biz) and l am absolutely aware of every single change in users allowed, also because l am the only person having the password of the Cpanel. Is there any way to protect my weblogs? Thank you!

No, l don't use any popup blocker right because l need popup windows when l use MT. And other programs too. It is a really weird thing...

Actually, l think not. Also because there is no data flow with a Movable Type rebuild... it is approximately the same cgi script as the one l use to publish a new entry. The blog itself works perfectly. Just the rebuild doesn't

It's 4 weeks that l can't make any rebuild of my Movable Type weblog. From home, where l am connected with high speed connection (optical fiber). From seaside (56k) or office pc (ADSL) everything works. Anyone has ideas of what is happening??? Could be any feature of my new pc? (already tried switching off both firewall and antivirus, but nothing worked properly)