GSA ranker infected by Virus, malware , or hacking attack

Freeman

I was working on GSA and i found all my links and URLs change with the links don't link with my projects. Below example of thousands of these links. Is there a virus, malware, or hacking activity can be able to replace my project target URL with these URLs. I scanned my computer and no virus or malware detected. Recently i got emails from ISP for warning as my system trying to create  a connection and the ISP considered as a hack.  I installed VPN to overcome the ISP warning,  But now i have these type of URL taken over my target URL list for all the campaigns I'm running ?

http:// h.ab.i.ta.ty.a.tp@apartments-seiseralm.com/info.php?a[]=<a+href=http://alejwiki.cz/U%C5%BEivatel:Stepanie18A>metin2</a><meta+http-equiv=refresh+content=0;url=https://www.osappoggi.it/gestione-carceri-a-reggio-facciamo-le-gnorri-la-risposta-dellex-direttrice-longo-e-rise/+/>

organiccastle

It's just an exploit in your site list, not a virus.

iherbs

Freeman said:

I was working on GSA and i found all my links and URLs change with the links don't link with my projects. Below example of thousands of these links. Is there a virus, malware, or hacking activity can be able to replace my project target URL with these URLs. I scanned my computer and no virus or malware detected. Recently i got emails from ISP for warning as my system trying to create  a connection and the ISP considered as a hack.  I installed VPN to overcome the ISP warning,  But now i have these type of URL taken over my target URL list for all the campaigns I'm running ?

http:// h.ab.i.ta.ty.a.tp@apartments-seiseralm.com/info.php?a[]=<a+href=http://alejwiki.cz/U%C5%BEivatel:Stepanie18A>metin2</a><meta+http-equiv=refresh+content=0;url=https://www.osappoggi.it/gestione-carceri-a-reggio-facciamo-le-gnorri-la-risposta-dellex-direttrice-longo-e-rise/+/>

It happens just uncheck explolits and for better campaign trackbacks and indexers as well. No only it improves the project also will save huge amount of your server resources.

Freeman

organiccastle said:

It's just an exploit in your site list, not a virus.

even if the final URL is not landing in the project URL??

Freeman

iherbs said:

Freeman said:

I was working on GSA and i found all my links and URLs change with the links don't link with my projects. Below example of thousands of these links. Is there a virus, malware, or hacking activity can be able to replace my project target URL with these URLs. I scanned my computer and no virus or malware detected. Recently i got emails from ISP for warning as my system trying to create  a connection and the ISP considered as a hack.  I installed VPN to overcome the ISP warning,  But now i have these type of URL taken over my target URL list for all the campaigns I'm running ?

http:// h.ab.i.ta.ty.a.tp@apartments-seiseralm.com/info.php?a[]=<a+href=http://alejwiki.cz/U%C5%BEivatel:Stepanie18A>metin2</a><meta+http-equiv=refresh+content=0;url=https://www.osappoggi.it/gestione-carceri-a-reggio-facciamo-le-gnorri-la-risposta-dellex-direttrice-longo-e-rise/+/>

It happens just uncheck explolits and for better campaign trackbacks and indexers as well. No only it improves the project also will save huge amount of your server resources.

i will disable it now, thank you.

organiccastle

Freeman said:

organiccastle said:

It's just an exploit in your site list, not a virus.

even if the final URL is not landing in the project URL??

Eventually a tier project? You should check your link sources as well, this specific domain is down and certainly not "verified".

Freeman

iherbs said:

Freeman said:

I was working on GSA and i found all my links and URLs change with the links don't link with my projects. Below example of thousands of these links. Is there a virus, malware, or hacking activity can be able to replace my project target URL with these URLs. I scanned my computer and no virus or malware detected. Recently i got emails from ISP for warning as my system trying to create  a connection and the ISP considered as a hack.  I installed VPN to overcome the ISP warning,  But now i have these type of URL taken over my target URL list for all the campaigns I'm running ?

http:// h.ab.i.ta.ty.a.tp@apartments-seiseralm.com/info.php?a[]=<a+href=http://alejwiki.cz/U%C5%BEivatel:Stepanie18A>metin2</a><meta+http-equiv=refresh+content=0;url=https://www.osappoggi.it/gestione-carceri-a-reggio-facciamo-le-gnorri-la-risposta-dellex-direttrice-longo-e-rise/+/>

It happens just uncheck explolits and for better campaign trackbacks and indexers as well. No only it improves the project also will save huge amount of your server resources.

thank you again for your support, i checked and i found the exploict not active as i attached you picture.

Freeman

organiccastle said:

Freeman said:

organiccastle said:

It's just an exploit in your site list, not a virus.

even if the final URL is not landing in the project URL??

Eventually a tier project? You should check your link sources as well, this specific domain is down and certainly not "verified".

yes we have no relationship with these domain with any of the running projects and we don't have the explicit active or event tier projects.

ariasanto

Freeman said:

iherbs said:

Freeman said:

I was working on GSA and i found all my links and URLs change with the links don't link with my projects. Below example of thousands of these links. Is there a virus, malware, or hacking activity can be able to replace my project target URL with these URLs. I scanned my computer and no virus or malware detected. Recently i got emails from ISP for warning as my system trying to create  a connection and the ISP considered as a hack.  I installed VPN to overcome the ISP warning,  But now i have these type of URL taken over my target URL list for all the campaigns I'm running ?

http:// h.ab.i.ta.ty.a.tp@apartments-seiseralm.com/info.php?a[]=<a+href=http://alejwiki.cz/U%C5%BEivatel:Stepanie18A>metin2</a><meta+http-equiv=refresh+content=0;url=https://www.osappoggi.it/gestione-carceri-a-reggio-facciamo-le-gnorri-la-risposta-dellex-direttrice-longo-e-rise/+/>

It happens just uncheck explolits and for better campaign trackbacks and indexers as well. No only it improves the project also will save huge amount of your server resources.

thank you again for your support, i checked and i found the exploict not active as i attached you picture.

I guess he said all the kitchensink so you have to uncheck trackbacks , rss and indexers as well, btw rss has some benifits in some case. So for lower tiers it can be used.