I just received this email from
security.admin@dsredirection.com Quote:
Dear Dsredirection valued Members
Regarding our new security regulations, as a part of our yearly maintenance we have provided a security guard script in the attachment.
So, to secure your websites, please use the attached file and (for UNIX/Linux Based servers) upload the file "guard.php" in: "./public_html" or (for Windows Based servers which use ASP) upload the file "guard.asp" in: "./wwwroot" in your site.
If you do not know how to use it, you can use the following instruction:
For Unix/Linux based websites that use PHP/CGI/PERL:
1) Download the attachment named "guard.zip"
2) Extract file "guard.php"
3) Login to your site Control panel.
4) Open "File Manager" window.
5) Go through "Public_html" or "htdocs"
6) Choose "Upload Files"
7) Upload the file "guard.php"
8) Check its URL too "http://www.yoursite.com/guard.php", if it is ok
For Windows based websites that use ASP:
1) Download the attachment named "guard.zip"
2) Extract file "guard.asp"
3) Login to your site Control panel.
4) Open "File Manager" window.
5) Go through "wwwroot" directory
6) Choose "Upload Files"
7) Upload the file "guard.asp"
8) Check its URL too "http://www.yoursite.com/guard.asp", if it is ok
Thank you for using our services and products. We look forward to providing you with a unique and high quality service.
Best Regards
Dsredirection Inc
http://www.dsredirection.com |
The attachmement guard.asp is a VBscript. I don't read VBScripts, so don't understand what it's doing. But what I fail to understand is why would we need such a protection because when we are using their dsredirection nameservers, we don't have any website to upload the script to? The website doesn't resolve either.
Smells fishy to me.