PDA

View Full Version : My sites are down


japamor
2006-09-23, 07:47 PM
If any LL is trying to access sites on my domain 'www.japamor.com', its down, and I don't know why. These things always happen at fucking weekends. |shocking|
I'm trying to find out why, and it'll be up as soon as possible but in the meantime, my apologies.

cd34
2006-09-23, 07:50 PM
Registrar of Record: TUCOWS, INC.
Record last updated on 18-Sep-2006.
Record expires on 22-Sep-2006.
Record created on 22-Sep-2004.

Domain servers in listed order:
NS2.SIMPLECOM.NET 216.77.84.8
NS1.SIMPLECOM.NET 208.62.162.3


Your domain expired yesterday.

mcd@tsavo:$ host japamor.com ns1.simplecom.net
japamor.com A 209.215.97.114
mcd@tsavo:$ host japamor.com ns2.simplecom.net
japamor.com A 209.215.97.114

and the site does appear to be pingable. Once the domain is renewed, things should come up pretty quickly.

japamor
2006-09-23, 08:11 PM
Phew! I really thought I'd already renewed it. I have now!
Thank you very much cd34. I owe you. You've saved me a lot of problems. (And I've learned a lesson).
Cheers

MrYum
2006-09-23, 10:30 PM
Congrats on the easy fix Japamor |thumb

As happens so often...Sparky to the rescue!

Do you by chance wear blue tights and a red cape??? :D

ladydesigner
2006-09-24, 08:22 AM
Hey Japamore. Glad your sites are back up! By the way, when I went to check on your root domain (http://www.japamor.com), 3 different times Norton popped up with a virus warning. |confused|

Linkster
2006-09-24, 11:09 AM
Yep - theres a trojan loading on that index page - tries to take control of system.exe by loading a new one as well as the file msarch.exe

MrYum
2006-09-24, 11:59 AM
Yep - theres a trojan loading on that index page - tries to take control of system.exe by loading a new one as well as the file msarch.exe
Ouch...that's no damn good at all.

Thought I had ICQ for Japamor, but no luck there...hope he sees this thread SOON.

cd34
2006-09-24, 12:09 PM
The script at the bottom of that page was most likely introduced through FTP rather than through a compromised web site.

Japamor, you will want to change your FTP password and remove the javascript from the bottom of that page.

japamor
2006-09-24, 04:52 PM
Thank you Lady Designer and everyone. I'm taking action right now. |thumb