My website is infected - iframe and malware- need someone to fix it

Discussion in 'Security' started by Eloans, May 6, 2009.

  1. #1
    I noticed that my website has been infected with malware and trojan virus and whenever someone visits my site it says it is infected . I need someone to fix it for me.
     
    Eloans, May 6, 2009 IP
  2. SSANZ

    SSANZ Peon

    Messages:
    861
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Contacted you via yahoo.

    Regards,
    SSANZ
     
    SSANZ, May 7, 2009 IP
  3. yah0m

    yah0m Peon

    Messages:
    88
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    have you contacted your host if you are on shared hosting? they could remove it all with 1 bash script.
     
    yah0m, May 11, 2009 IP
  4. soswebscan

    soswebscan Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    SOSWebscan makes your website IFRAME BADWARE/MALWARE free. Its very easy to install on your server and it will not eat your bandwidth.

    Get ready to be a free from "REPORTED ATTACK SITE" message on your website
    Use SOSWebScan and always away from above shown message on your website
    Why SOSWebScan?
    SOSWebScan gives you full power to defeat the IFRAME BADWARES which are the biggest thing to stop your websites. Dont worry SOSWebScan can easily removes them from your site and make your site updated & IFRAME Badwares Free.

    * Scans each file on your Web Server.
    * Remove IFRAME related badwares.
    * Keep your site updated and badwares free every hour.
    * Its simply take a backup of your valuable file(with prefix of "bak_sosweb_scan_") and then remove a badware from file.
    * Generate Scan Logs.
    * Generate Sitemap to scan your site.
    * Its fast and run at server background.
    * Keeps you away from "REPORTED AS ATTACK SITE" on your website.

    FOR LIVE DEMO : http://soswebscan.jobandproject.com/
     
    soswebscan, Oct 1, 2009 IP
  5. Asako

    Asako Peon

    Messages:
    266
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    SOSWebscan - I never heard about this product before. Does anybody use it before?
     
    Asako, Oct 4, 2009 IP
  6. Eloans

    Eloans Active Member

    Messages:
    179
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    53
    #6
    Guys the issue was long resolved , i guess no body cared to nitce that it has been aaround 5 months since the post was made. Please close the thread.
     
    Eloans, Oct 4, 2009 IP
  7. seodelhi

    seodelhi Active Member

    Messages:
    882
    Likes Received:
    29
    Best Answers:
    0
    Trophy Points:
    70
    #7
    Can you tell me how this issue was resolved? I am facing similar issues with my sites. Please let me know. Thanks!
     
    seodelhi, Oct 5, 2009 IP
  8. NiggsNetwork

    NiggsNetwork Peon

    Messages:
    25
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Just try having a look through your source code. I do remember seeing something about a msn iframe
     
    NiggsNetwork, Oct 6, 2009 IP
  9. mbozo

    mbozo Peon

    Messages:
    9
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    if that's what you do is the same as what I experienced before, and so is the easy way you live to delete your last code pairs, and then you live reports on the webmaster to manually google, or yahoo
     
    mbozo, Oct 12, 2009 IP
  10. dbgs

    dbgs Peon

    Messages:
    1
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    ]

     
    dbgs, Nov 12, 2009 IP
  11. UCDaZ

    UCDaZ Active Member

    Messages:
    180
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    53
    #11
    There a some malware removal tools out there to monitor and prevent malware.
    You could download tools from www.dasient.com
    They work pretty well to remove the infection on my site and they even got me off of google's blacklist.
     
    UCDaZ, Mar 3, 2010 IP
  12. submitmaster

    submitmaster Well-Known Member

    Messages:
    329
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    103
    #12
    you can most prob fix this by entering your site via FTP and deleting the latest files installed in your root or any other folder, just sort by date, and sometimes they will delete or rename your index and so you willl need to repalce it whith your backup. also change your username and password asap.
    good luck
     
    submitmaster, Mar 8, 2010 IP
  13. geester1

    geester1 Well-Known Member

    Messages:
    2,250
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    105
    #13
    I had same issue, contacted my host and they didn't want to know! They told me to go and check each page of the site fortunately it only had 15 pages and I found the script at the bottom of the index page!

    Freehostia is the host co - avoid them!
     
    geester1, Mar 10, 2010 IP
  14. proactiv

    proactiv Peon

    Messages:
    1
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #14
    Can you tell me what the script looked like? We are having a similar issue with our site, which was built by a third party uning the Joomla CMS. The security software on my desktop computer identifies 3 files that represent a threat, two of these files have a .js extension, which I understand are JavaScript files.
     
    proactiv, Mar 10, 2010 IP
  15. robyries

    robyries Notable Member

    Messages:
    3,230
    Likes Received:
    51
    Best Answers:
    6
    Trophy Points:
    205
    Digital Goods:
    1
    #15
    that would be nice if you share your site here, so we can see what's going on, btw are you running some ads like clicksor or something,... :confused:
     
    robyries, Mar 10, 2010 IP