https://www.icyphoenix.com/viewtopic.php?f=35&t=2779&p=19605#p19605
-----------------------------------
buzzy84
Thu 13 Sep, 2007 18:47

Re: Headers Already Sent.
-----------------------------------
[quote user="Vortex" post="19602"]Solved. 



MG, no need to destroy everything...  :mrblue:  I just found the bad scripts and eliminated them. Then I cleared /includes folder's infected files replacing them with original ones.


I took a look at that login.php I talked you about... the script was a phishing one, composed of 2 files: 1 html clone login page and 1 php mail script that generated the phishing mail. The HTML line in every file I don't know, maybe another spam added after the first attack, I don't think is linked to the phishing script.


For those of you who wanna see the bad script, just ask.


Just a question, MG or whoever can answer: the attack put two new files in my root... so as far as I can think with my few acknoledgements: that is not an XS security hole, but is hosting's security's fault, right? Should I get angry with 'em?  :evil:[/quote]

	
With which service of hosting it has appened?


