News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

Can't post anything: "The connection was reset"

Started by backend, July 23, 2014, 11:11:52 AM

Previous topic - Next topic

backend

Spoke to them again. They said it looks like a PHP file, likely disguised as a GIF file, was uploaded to my website. This file is acting as a malware and thus GoDaddy is blocking it from making a connection, every time takes an action that is triggering it.

They said they will try to look for this malicious code and they have no easy way of finding it, if ever.

If anyone knows where I can look for this code, it would be great. I already scanned my site but found nothing.

And I am not even sure where this malware is, whether it is on my forum directory or other places. Forum is the only section I can think of that can allow you to upload images.

Ninja ZX-10RR

IMHO they are fooling you... I've never heard about anything similar before...
Quote from: BeastMode topic=525177.msg3720020#msg3720020
It's so powerful that on this post and even in the two PMs you sent me,you still answered my question very quickly and you're apologizing for the delay. You're the #1 support I've probably ever encountered man, so much respect for that. Thank you, and get better soon.

I'll keep this in my siggy for a while just to remind me that someone appreciated what I did while others didn't.

♥ Jess ♥

STOP EDITING MY PROFILE

kat

Quote from: backend on July 25, 2014, 02:20:07 PMThey said they will try to look for this malicious code and they have no easy way of finding it, if ever.

That inspires confidence in them, doesn't it? ;)

If I'd been unfortunate enough to use Nodaddy, I think I'd look through my directories, setting the files in date order, to see if there's a file, there, which has a recent date on it, that looks a bit spurious.

I have a feeling that I wouldn't find anything, though.

Can you do a file compare (Laborious though that is)?

Illori

Quote from: Flavio93Zena on July 25, 2014, 02:29:33 PM
IMHO they are fooling you... I've never heard about anything similar before...

it has happened before... it was the cause of many hackings before the attachments and avatars got encrypted file names. any decent host would let you know the name of the file at least.

Ninja ZX-10RR

Quote from: Illori on July 25, 2014, 02:32:33 PM
Quote from: Flavio93Zena on July 25, 2014, 02:29:33 PM
IMHO they are fooling you... I've never heard about anything similar before...

it has happened before... it was the cause of many hackings before the attachments and avatars got encrypted file names. any decent host would let you know the name of the file at least.
Well thanks for letting me know :) and I agree actually, any decent host would have mentioned the name of the file, they should have it in their logs somewhere.
Quote from: BeastMode topic=525177.msg3720020#msg3720020
It's so powerful that on this post and even in the two PMs you sent me,you still answered my question very quickly and you're apologizing for the delay. You're the #1 support I've probably ever encountered man, so much respect for that. Thank you, and get better soon.

I'll keep this in my siggy for a while just to remind me that someone appreciated what I did while others didn't.

♥ Jess ♥

STOP EDITING MY PROFILE

iamarealbigdog

This is a duplicate of my issue and we are running at the same status... Funny same date and same responses

They final answer is that this is third party software and that it's not their problem.

MOD's  should we merge the two threads...

Will follow to see if you get anywhere


So far it looking like an uninstall and reinstall, but I don't want to loose all of our history... ARGHHHHH

iamarealbigdog

Quote from: iamarealbigdog on July 24, 2014, 09:13:25 AM
Canadian Southern BBQ Association
Very active forum for 2 yrs
http: //www.csbbqa.com/smf_forum/index.php [nofollow]
version 2.02
Host Go Daddy

Issue started July 17th, 2014 was intermittent for the day but by the end of the day effected all users


http://www.simplemachines.org/community/index.php?topic=525600.0

this is the other thread I am running on

Kindred

For the love of gods, why do people assume that a clean set of files will lose their data?

Does no one actually read the FAQ/manual about how to load a fresh set of files?
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Drunken Clam

Quote from: Kindred on July 25, 2014, 05:33:46 PM
For the love of gods, why do people assume that a clean set of files will lose their data?

Does no one actually read the FAQ/manual about how to load a fresh set of files?

Apparently not! :-)

Ninja ZX-10RR

Quote from: Kindred on July 25, 2014, 05:33:46 PM
For the love of gods, why do people assume that a clean set of files will lose their data?
Ask them :P

Quote from: Kindred on July 25, 2014, 05:33:46 PM
Does no one actually read the FAQ/manual about how to load a fresh set of files?
Probably they don't xD anyway you will probably be posting from the phone so I will provide you the link you are talking about --> http://wiki.simplemachines.org/smf/How_to_upload_a_fresh_set_of_files
Quote from: BeastMode topic=525177.msg3720020#msg3720020
It's so powerful that on this post and even in the two PMs you sent me,you still answered my question very quickly and you're apologizing for the delay. You're the #1 support I've probably ever encountered man, so much respect for that. Thank you, and get better soon.

I'll keep this in my siggy for a while just to remind me that someone appreciated what I did while others didn't.

♥ Jess ♥

STOP EDITING MY PROFILE

iamarealbigdog

Quote from: Kindred on July 25, 2014, 05:33:46 PM
For the love of gods, why do people assume that a clean set of files will lose their data?

Does no one actually read the FAQ/manual about how to load a fresh set of files?

with no disrespect intended, I have a full time job, a competition BBQ team to run, a national BBQ association and just spent 6 hours on the phone with Go Daddy for them to basically to tell me to piss off.

I am not a computer IT specialist and I maintain a forum for BBQ enthusiast. I can cook the world's best steak, Canada's best Whole Hog and an awesome chili being the undefeated National Chili Champion. I am doing research for our team's submission to the 2014 World food championship and putting three kids through University.

As of writing this message there is 3,510,977 Posts in 426,081 Topics by 338,009 Members on this forum.

Sorry I did not get to the one message you indicated,



iamarealbigdog

Quote from: Flavio93Zena on July 25, 2014, 05:45:22 PM

Probably they don't xD anyway you will probably be posting from the phone so I will provide you the link you are talking about --> http://wiki.simplemachines.org/smf/How_to_upload_a_fresh_set_of_files




Thank you kindly this will save me countless hours of work


Mike

Ninja ZX-10RR

#32
Quote from: iamarealbigdog on July 25, 2014, 06:39:11 PM
Quote from: Flavio93Zena on July 25, 2014, 05:45:22 PM

Probably they don't xD anyway you will probably be posting from the phone so I will provide you the link you are talking about --> http://wiki.simplemachines.org/smf/How_to_upload_a_fresh_set_of_files
Thank you kindly this will save me countless hours of work


Mike
No problem you're very welcome :D
Quote from: BeastMode topic=525177.msg3720020#msg3720020
It's so powerful that on this post and even in the two PMs you sent me,you still answered my question very quickly and you're apologizing for the delay. You're the #1 support I've probably ever encountered man, so much respect for that. Thank you, and get better soon.

I'll keep this in my siggy for a while just to remind me that someone appreciated what I did while others didn't.

♥ Jess ♥

STOP EDITING MY PROFILE

Kindred

do note, I did indeed indicate the FAQ, not all the messages in the forum (and as notes, I didn't link you directly because I was posting from a phone and it's difficult to paste links -- but hopefully, pointing someone to the FAQ will encourage them to read it. :)


I'll argue about the steak later...  I cook a mean sirloin, rubbed with a cacao/chipotle dry rub... :D
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

iamarealbigdog

UPDATE

We were able to reset our system and posting is back online... I hate Go Daddy, why do I give them so much money. I will spend the weekend backing up again and then upgrading to the 2.08 version...


Thanks all

(and as for the steak, we are the holders of three world championships titles for it, good luck)

Steve

Quote from: Kindred on July 25, 2014, 08:52:28 PMI cook a mean sirloin, rubbed with a cacao/chipotle dry rub... :D

[OT]When's the BBQ?[/OT]
DO NOT pm me for support!

backend

Quote from: iamarealbigdog on July 25, 2014, 09:54:35 PM
UPDATE

We were able to reset our system and posting is back online... I hate Go Daddy, why do I give them so much money. I will spend the weekend backing up again and then upgrading to the 2.08 version...


Thanks all

(and as for the steak, we are the holders of three world championships titles for it, good luck)

Can you explain what you mean by 'resetting our system'?

Did you have to start from scratch or did GoDaddy resolve the issue?

backend

I don't think it was a good idea to merge these two threads. One issue got resolved and the topic was marked solved while the other issue (mine) is not resolved yet, so it is a bit confusing.

It is almost 2 weeks now and the issue is still not resolved. Last time I called GoDaddy, they said they are still working on it.

I even went ahead and installed SiteMark and so far it hasn't found any issues, although the 'SQL Injection Scan' and 'Application' scans are still pending.

Illori

if it had been 2 weeks and i was waiting i would have already started to search for a new host...

backend

Quote from: Illori on July 29, 2014, 09:58:22 AM
if it had been 2 weeks and i was waiting i would have already started to search for a new host...

you guys make it sound so easy to just search for a new host.

honestly, I have been with GoDaddy since about 2001 or so and hardly ever had a problem. I have so much hosted with them and moving away would be a nightmare. I mean it is doable but don't think it is warranted.

I just want to see what others have done to fix this issue so I can maybe replicate it.

Advertisement: