Virus on my website?

Discussion in 'HTML & Website Design' started by Giamatti, May 31, 2010.

  1. #1
    Today i went to my site, where i havntbeen around for like 3/4 weeks. what i saw was something i didnt like. my virus scanner went of like crazy, the warning system stated there was phising software detected.

    when i closed down my antivirus and opendmy site again a pop up came saying that software updates are needed to view the site. and if i wanted to run the update client.

    this is the site http://www.virtualestatetycoon.com/
    enter the site with caution.and whatever you do, dont run the software.

    could anyone help me, because i have no clue what to do.

    ~Giamatti
     
    Giamatti, May 31, 2010 IP
  2. chandan123

    chandan123 Prominent Member

    Messages:
    11,586
    Likes Received:
    578
    Best Answers:
    0
    Trophy Points:
    360
    #2
    your site is hacked install with backup and see
     
    chandan123, May 31, 2010 IP
  3. Giamatti

    Giamatti Well-Known Member

    Messages:
    1,319
    Likes Received:
    18
    Best Answers:
    0
    Trophy Points:
    148
    #3
    i was allready affraid for that. how do i protect myself from that the next time?
     
    Giamatti, May 31, 2010 IP
  4. chandan123

    chandan123 Prominent Member

    Messages:
    11,586
    Likes Received:
    578
    Best Answers:
    0
    Trophy Points:
    360
    #4
    what kind of script /cms u were using ?
     
    chandan123, May 31, 2010 IP
  5. joemar

    joemar Peon

    Messages:
    305
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    hire someone to fix your problem
     
    joemar, May 31, 2010 IP
  6. Giamatti

    Giamatti Well-Known Member

    Messages:
    1,319
    Likes Received:
    18
    Best Answers:
    0
    Trophy Points:
    148
    #6
    i bought the site around 3/4 weeks ago, didnt look into it yet because i went on vacation. hence why i could only find out now it was hacked. so i cant say wich cms it was. it was a sales page offering a owned ebook.
     
    Giamatti, May 31, 2010 IP
  7. chandan123

    chandan123 Prominent Member

    Messages:
    11,586
    Likes Received:
    578
    Best Answers:
    0
    Trophy Points:
    360
    #7
    so better contact the old site owner once and ask him if he can do anything for restoring the site
     
    chandan123, May 31, 2010 IP
  8. Andru Saw

    Andru Saw Peon

    Messages:
    47
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    you have buy good anti virus soft ware so your site will be safe
     
    Andru Saw, May 31, 2010 IP
  9. focused

    focused Guest

    Messages:
    343
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    yea, even i;d suggest buying anti virus software.
     
    focused, May 31, 2010 IP
  10. magic99

    magic99 Peon

    Messages:
    91
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    If you have backup then delete all the files and upload fresh from backup
     
    magic99, May 31, 2010 IP
  11. bawx

    bawx Peon

    Messages:
    79
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #11
    it has been hacked with something known as a java driveby
     
    bawx, May 31, 2010 IP
  12. msk19994

    msk19994 Well-Known Member

    Messages:
    1,030
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    160
    #12
    the thing is tha backup ur site via ftp and then evry thing in ur ftp and then the things u backed up scan via ur antivirus after scanned place ur site back up via ftp and then i think the virus will be gone
     
    msk19994, May 31, 2010 IP
  13. trevHCS

    trevHCS Peon

    Messages:
    40
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #13
    Initially I'd delete the front page of the site as it stands as it'll get listed on Google and similar as very dodgy and that can take a while to get removed. After that, I suspect it might be the previous owner who's installed this as a lot of the ebook sites are scams....but they might be innocent.

    Trev
     
    trevHCS, Jun 1, 2010 IP
  14. vannarith

    vannarith Active Member

    Messages:
    1,814
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    50
    #14
    i just brows the site and now my pc got infected due to the site. Will that virus ruin my pc and all my info?
     
    vannarith, Jun 1, 2010 IP
  15. james_maduk

    james_maduk Peon

    Messages:
    33
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #15
    firefox doen't even allow me to open the site. It shows malware attack detected!!!
     
    james_maduk, Jun 1, 2010 IP
  16. trevHCS

    trevHCS Peon

    Messages:
    40
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #16
    Looks like the main file isn't loading anymore so guess it's been taken down. Seems to be a Java applet too, but guessing that's designed to create a secure shell session which then downloads the other file which is presumably the virus.

    Oddly my FF 3.6.3 hasn't blocked it and neither has WOT, but NOSCRIPT seems to have blocked it. Might also help that Java is turned off.

    Guessing it probably won't have done anything to the computer as it can't download the file.

    Trev
     
    trevHCS, Jun 1, 2010 IP
  17. bobs

    bobs Active Member

    Messages:
    83
    Likes Received:
    14
    Best Answers:
    0
    Trophy Points:
    98
    #17
    1) Change ftp passwords. Keep something hard to read.
    2) Remove all virus code from your pages. Check index and js files carefully.
    3) Don't use freeware ftp software for uploading. Use file manager for uploading files. Mostly virus passes through FTP to server.
    4) It would be better and safe to use ubuntu (linux OS) for uploading purpose as it does not support most virus .exe files.
     
    Last edited: Jun 3, 2010
    bobs, Jun 3, 2010 IP
  18. webpromoterservice

    webpromoterservice Peon

    Messages:
    271
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #18
    you should also signup to webmaster tools to get a more detailed description of what malware is affecting your site
     
    webpromoterservice, Dec 1, 2010 IP