Posts Tagged ‘security’

Badware! fgg.js What is it?

Friday, August 29th, 2008

What is Badware anyways? Well StopBadware.org, a project run by Academic Institutions such as Harvard Law School define it as “Badware is software that fundamentally disregards a user’s choice
regarding how his or her computer will be used. You may have heard of
some types of badware, such as spyware, malware, or deceptive adware”.

How can this affect websites though? It does. Using a server security vulnerability and an automated attack toolkit such as “Asprox” (article), hackers can inject malicious code into files throughout the entire server and as well SQL run servers.

These “scripts” can be small pieces of Javascript code inserted into the last or second last line of each document. Commonly found is a script named “fgg.js” which distributes malware to visiting computers. This code is for the most part invisible unless the code is found, most of the time by accident.

How do you remove this code? First what you need is an HTML editor such as Dreamweaver to be able to “Find and Replace” code throughout the entire site.

In Dreamweaver make sure the site you need to get rid of the code in is open in your File window.

  • Select “Edit > Find and Replace”
  • The select the drop down beside “Find in”.. “Selected Files in Site”
  • Insert the whole line including opening and closing Script tags
  • Have nothing in the replace window below we aren’t replacing the code with anything.
  • Let Dreamweaver do the work and upload the entire site

This is only part of solution. The malicious code was inserted somehow and is best to contact your host about possible vulnerabilities.