Strange HTML Tag?

Posted on 16th Feb 2014 07:03 pm by admin

I recently noticed some odd HTML appear in some of the websites I host. Not all of them are run on a CMS but the majority (but not all) are running through the same FTP account.

I've searched everywhere for documentation, forums, notes on this particular exploit but haven't been able to find anything. Essentially, there is a small HTML snippet (see below) that appears right before the </html> tag. It's really odd and the characters inside the <b1> are all different strings.

Here's the code that's appearing:
Code: <b1><!--6FY8rhRLeNoNyVsOwiAQBdAdca0PXE5DYVKngSkZrsG4ej2/B80UJt+FlytuMcbnHbmqHEcoMnS3r9aaRshnw5QN+TT+F7NMUFqviTLgXCnuyei6vU3WY3lArcgn9Ff/AVyxJcZ=--></b1>
It's evident that the code is some type of exploit but I'm not sure how deep this goes. Anyone heard of anything like this, or have any idea of what the potential issues that could occur? Thanks for your help!

-suess0r

Your Answer:

Login to answer

Other forums

Printing issues with xMII 11.5
For some reason, we have one report (and only one) that is giving us fits when trying to print. The

Rss feed question
Hi

My blog and my website are different. Am i able to take my rss feed
from my blog and p

problem with refreshing
in my site, i have an index page, it has a main div. this main div's content is changing according t

add text and number image
hi guys ..

ok see i want the user to add their name and pick a number then click get it and i

big pagination problem in php
<?php

$connect = mysql_connect("localhost", "root", "")

FTP issues
Hi all,


I am currently facing some serious problems with a script and really need some ad

Changes to hosting company's server has affected web contact form
I started a thread a couple of months ago about the contact forms on my client's website. Basically

error help - Dynamic Image
I've been working on making my site less cluttered in the directories and more secure lately. In an

Got A Free Server :(
So I was given a free server

http://shopping.yahoo.com/p:Compaq%20ProLiant%201500%20Server:1

Receive Rosettanet Message to SAP 4.6c
Dear all ,

My customer will send the PO details by rosettanet message , Is it