One of my sites on a DreamHost server keeps getting hacked... I everything I can think of to fix it, but for some reason no luck...

basically whats happening is, that this person or automated computer inserts a iFrame tag to ALL my index.html files... then if it is removed promptly google red flags it, as me distrusting malware.

I tried to do some research but cant find anything on the WWW. Best I can do is show you... I have removed it from my site, but google pulled up another site with the same problem: thecorsofamily.com

I have changed all passwords, there are no scripts like phpbb or anything anymore. but still keeps happening.

any ideas anyone?

Originally Posted by mp04

One of my sites on a DreamHost server keeps getting hacked... I everything I can think of to fix it, but for some reason no luck...

basically whats happening is, that this person or automated computer inserts a iFrame tag to ALL my index.html files... then if it is removed promptly google red flags it, as me distrusting malware.

Well, I would say that the physical box has been hacked. Contact DreamHost.

Nick

Originally Posted by nmallare

Well, I would say that the physical box has been hacked. Contact DreamHost.

Nick

Nick, I thought about that too, but, I have about 6 domains on that same server, and there is only one causing this problem.

Do you have any pages that have any type of form-based upload?

Nick

nope,
I had one page that would call "forgot the milk" tasking website, but I don't think it should effect all the other index.html pages since that was a sub domain in a folder by it self and everything (thats deleted now, since I am deleting files one by one to see whats causing it, but thats a long a tedious process and wanted to see if anyone new of the top of there heads)

Can you tell me your site to check its vulnerabilities and inform you about?
Also install free firewall: Mod Security

is there any php files upload pages contact pages there might be a vulnerability in that

Well you could send me your url and I can look over it for simple vulnerabilities. But if you want to be secure a through check is something people do as a paid service.

Also have you tried changing your password to the dreamhost manager thingy.

Do you have a linux or a windows hosting? I helped to fix the similar problem a while back here is the link to the forum where the solution is http://www.geekzone.co.nz/forums.asp...&topicid=30877 I hope this will help you.
If it does not Igrame injection can be coming from the following places
1) template files generally header or footer
2) databse
3) Random fille somewhere on a server via .htaccess file
Try to do a full restore of your website including database (before you do restore delete existing website don't just overwrite the files)