Greetings all.

Despite the grim sounding title, this isn't as bad as it seems, at least as far as your personal information is concerned. There's no evidence to suggest that the database housing your information has been compromised, but it *is* true that pretty much every page on Lythia.com that ended with '.php' has had some code inserted at the beginning of the page which, every once in a while, redirects people to a variety of different web sites that may or may not contain malware.

I have cleaned all the pages I can find (and there are an awful lot of them), but I will be carrying out further examinations over the next few days to see if I got everything. In the meantime, you can always change your password to this site if you feel that could a good move. I'm not going to insist on it, but it certainly can't hurt anything.

I suspect what's happened is that my hosting account password has been compromised so I've already changed *that*, at least. However, one thing you can do is clear your own caches at home. Pages you go to frequently will commonly be held in cache by your browser, and you could experience the same symptoms even though the source of the infection has been cleared.

But if you've cleared your cache and taken all the other precautions sensible people with an Internet connect do and you still get redirected by a page on Lythia.com, please let me know, especially the URL that's doing it. I'm certain I've missed some because there are simply so many pages...and folders, sub-folders, sub-sub-folders, ad nauseum...but I'd like to eventually get rid of it all without scraping the site down to bare metal and starting again, if possible.

_________________
Cheers

Leitchy
List & Forum Admin
Admin FAQs
[Updated 25-FEB-2011]

Hi Peter

Cleaned my cache and logged on today and got a redirect. Didn't save the URL, but clearly to kosher.

Cheers,
Conal

Same here. Got a redirect to http://ustreambesttv.rr.nu/11f/
from the http://www.lythia.com/forum/ page before I had even logged in.

Yep, it's happened again.

_________________
Cheers

Leitchy
List & Forum Admin
Admin FAQs
[Updated 25-FEB-2011]

I just encountered that one as well.

Hopefully the redirect code is now gone forever, but my hoster is now going to scan all pages on all domains in my hosting once a month to double check.

As usual, let me know if things happen from this point on...

_________________
Cheers

Leitchy
List & Forum Admin
Admin FAQs
[Updated 25-FEB-2011]