Got attacked by china virus!!! what shd i do ?

Discussion in 'General Chat' started by Pammer, Apr 7, 2009.

0
  1. #1
    Well, atleast i find out whenever you look for good hosting plan check their internal anti virus system too....

    seem like my whole server.. no infact my other different accounts too got attacked by this shit stupid *(&%%$^#$)%$%# trojan virus :mad: :mad:

    its getting stuck with any index.php file and putting some iframe links, bahh...


    [​IMG]



    I tried to pull over all those links but still.. same results... i asked to my hosting people and they said they will guide me for 75$/hour as how to install clamav antivirus via WHM and check all your file.. geez

    and now i wonder, if anyone dp member would like to help me to get rid of this shitty probs ?
     
    Pammer, Apr 7, 2009 IP
  2. micksss

    micksss Notable Member

    Messages:
    4,427
    Likes Received:
    268
    Best Answers:
    1
    Trophy Points:
    285
    #2
    If you have a backup of your site that isn't infected move it to a new host. If not, clean everything up the best you can, scan everything from your computer and once everything is clean upload to a new host.
     
    micksss, Apr 7, 2009 IP
  3. jake19833

    jake19833 Peon

    Messages:
    23
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    try removing it with china antivirus
     
    jake19833, Apr 7, 2009 IP
  4. Pammer

    Pammer Notable Member

    Messages:
    3,417
    Likes Received:
    397
    Best Answers:
    0
    Trophy Points:
    260
    #4
    eh i thought that's all what i was doing.. but moving hosting and buying new server is such a harsh thing

    i wonder, if someone know any whm plugin like search and replace to entire my server files ??

    or if putty can do that ?

    any idea ?
     
    Pammer, Apr 8, 2009 IP
  5. koan

    koan Well-Known Member

    Messages:
    607
    Likes Received:
    19
    Best Answers:
    0
    Trophy Points:
    135
    #5
    You can't just reupload a clean version of your site, you need to figure out the vulnerability so it doesn't happen again.
     
    koan, Apr 8, 2009 IP
  6. jackass2007

    jackass2007 Peon

    Messages:
    2,379
    Likes Received:
    267
    Best Answers:
    0
    Trophy Points:
    0
    #6
    That virus looks nasty. Isn't that server vulnerability that let the virus in? :confused: which should be fixed my server guy, and look he is asking you to pay. :eek:
     
    jackass2007, Apr 8, 2009 IP
  7. cool_78

    cool_78 Guest

    Messages:
    11,409
    Likes Received:
    339
    Best Answers:
    0
    Trophy Points:
    0
    #7
    They should not charge you for that because they are the ones who messed up with their poor antivirus software.
     
    cool_78, Apr 8, 2009 IP
  8. amol_cool

    amol_cool Guest

    Messages:
    855
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    0
    #8
    exactly! How come it's your fault. They should be the one handling it all for you! Threaten them that you will leave their hosting. May be then they will do it for you :D

    Btw which host are you using?
     
    amol_cool, Apr 8, 2009 IP
  9. danish muzaffar

    danish muzaffar Banned

    Messages:
    1,752
    Likes Received:
    296
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Lolz Use chinese anti Virus :)

    i am using Avira Anti Virus , its pretty not New Igues but with broadBand Connection Its Tear aLL viruses and Can EAsily Be Updated :)

    Danish Muzaffar
     
    danish muzaffar, Apr 8, 2009 IP
  10. Pammer

    Pammer Notable Member

    Messages:
    3,417
    Likes Received:
    397
    Best Answers:
    0
    Trophy Points:
    260
    #10
    guys, its spreading and spreading with mine other freinds hosting accnt.... its full of shit virus!!!

    Today they were injected with two new websites, will soon post those url too...

    i had a idea, but don't know if it can work.. like if there is any code like we can stop to execute those iframe links... or stop those cn website ????
     
    Pammer, Apr 8, 2009 IP