Re: Beware of Hightechdealz
Hey guys thanks for letting everyone know about this. I would send out a news letter to all my customers but I lost all records of everything when I reset my server.
I believe somehow the hacker was able to figure out an exploit while using the "send page email to someone" feature of zen cart and uploaded a virus that spread eval base64 decode code into all of the .php files on my server. The code makes the website redirect to a malware website that makes itself appear like your computer has a virus and to pay to download a program to remove the virus (aka download a virus and pay for it). The new update on zen cart handles this exploit and removes it, also I've disabled the "send page email to someone" feature as well.
I had to delete everything to get rid of that malicious code. I went through and deleted what I thought was the bad code out of 2000 php files, but that somehow didn't get rid of it. I tried upgrading zen cart (hadn't done that sooner due to my real job being busy). upgrading didn't work.
so I deleted everything, that did the trick.
I just got the site back up and functioning again, should all be safe now.
please email me at
ken1645@gmail.com if you happen to find anything fishy though.
Also thankfully my brother and I were up to date on taking care of orders so all the previously ordered items have been shipped out and emails were sent out to customers with the tracking info.
I would have fixed this sooner but was out of town in Austin on training for my real job and got back yesterday.
As a result of me redoing everything on my site, I've made my prices a bit cheaper and am having 8% off sale for a week for good measure.
thanks,
Kendall