My site has a virus......

Discussion in 'Programming' started by rachelle123, Dec 3, 2008.

  1. #1
    I have a myspace resource site.. and have been told that it has a virus.

    People started complaining after I put up clicksor ads on it. But I was also told it could of been hacked into.

    I have tried removed all the clicksor codes but they are still showing up..

    What should I be looking for in the code to find this virus? and could it be from the clicksor ads?

    The main php files are header.php, footer.php and index.php..

    Really need your advice!!!

    Thanks.
    Kim
     
    rachelle123, Dec 3, 2008 IP
  2. Boulder

    Boulder Well-Known Member

    Messages:
    806
    Likes Received:
    46
    Best Answers:
    0
    Trophy Points:
    118
    #2
    I have been reading a lot lately about certain ad networks that are loaded with adaware (virus) type crap.. So it very well could have been the ads that causing issues.

    When you look at the code, look for things like strings of encrypted code and such.. like a long string of garbled numbers. Also look for javascript inserts or includes, kind of look like like:

    <script language="javascript">Code and URL's and stuff in here</script>

    Some things using javascript may be good and are part of what makes the page, however sometimes they can hold junk stuff.. So make sure you know what the functions are doing inside any of those script tags, if you have them anywheres in the pages..

    Boulder
     
    Boulder, Dec 3, 2008 IP
  3. rachelle123

    rachelle123 Active Member

    Messages:
    238
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    58
    #3
    Is there a certain program out there that can scan my code to tell me where it is? As I am just learning php and html?
     
    rachelle123, Dec 3, 2008 IP
  4. -Maverick-

    -Maverick- Well-Known Member

    Messages:
    491
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    185
    #4
    Try looking into your index.php or index.html files at the bottom of the files and compare it with your original, if you notice any gibberish looking code delete it.
     
    -Maverick-, Dec 3, 2008 IP
  5. harrisunderwork

    harrisunderwork Well-Known Member

    Messages:
    1,005
    Likes Received:
    21
    Best Answers:
    0
    Trophy Points:
    135
    #5
    Please tell ur site url so we can directly look into it.
     
    harrisunderwork, Dec 4, 2008 IP
  6. icecubedesigns

    icecubedesigns Peon

    Messages:
    23
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    If the domain is hosted in a windows server, then request your host to run a trojan check on the files.
     
    icecubedesigns, Dec 4, 2008 IP
  7. rachelle123

    rachelle123 Active Member

    Messages:
    238
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    58
    #7
    the site is www.candy-lyts.com.. I have downloaded all files onto my hard drive and scanned them and they coming back as good.

    Although I did remove all of the clicksor code from the index.php footer.php and header.php

    But if you go to the landing and click on christmas myspace layouts and hover over a link.. clicksor ads are there... I have removed the code from everywhere... Where would this code be...???

    Kim
     
    rachelle123, Dec 4, 2008 IP
  8. harrisunderwork

    harrisunderwork Well-Known Member

    Messages:
    1,005
    Likes Received:
    21
    Best Answers:
    0
    Trophy Points:
    135
    #8
    I cant see any clicksor ad, can u provide us the url where u see the ad ?
     
    harrisunderwork, Dec 4, 2008 IP
  9. rachelle123

    rachelle123 Active Member

    Messages:
    238
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    58
  10. wh0

    wh0 Banned

    Messages:
    146
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #10
    my guess is it is a iframe inputted by somebody who hacked your site
     
    wh0, Dec 4, 2008 IP
  11. rachelle123

    rachelle123 Active Member

    Messages:
    238
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    58
    #11
    rachelle123, Dec 4, 2008 IP
  12. admin1cap

    admin1cap Guest

    Messages:
    11
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #12
    what a bummer....I hate when that happens!!
     
    admin1cap, Dec 4, 2008 IP
  13. nicogranelli

    nicogranelli Peon

    Messages:
    68
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #13
    You wont get any result with an antivirus software.

    An antivirus will detect virus software in your machine. If you get hacked, you don't have a virus, nor your site is infected

    A hacker could put some code in your site so your visitor get the virus, but a web site can't be "infected"

    You have to do what the other peoples here have told you. Just look very carefully in the code, trying to find something strange
     
    nicogranelli, Dec 4, 2008 IP
  14. rachelle123

    rachelle123 Active Member

    Messages:
    238
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    58
    #14
    I have actually looked at the code and can't find anything. Although I am very new to html and php.. Would it only be in the index.php, header.php and footer.php or could it be somewhere else?

    And what I did was actually scanned all my files.
     
    rachelle123, Dec 5, 2008 IP
  15. BlackBurd

    BlackBurd Peon

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #15
    i just looked at your site and i see no virus but i do get anoying popups unless thats what you are talking about.
     
    BlackBurd, Dec 5, 2008 IP
  16. Clicksor_CS

    Clicksor_CS Active Member

    Messages:
    259
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    70
    #16
    Please PM me your publisher account ID for investigation.

    Thank you,
     
    Clicksor_CS, Dec 11, 2008 IP
  17. MrBrian

    MrBrian Active Member

    Messages:
    334
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    75
    #17
    Sorry Clicksor, but you guys have a horrible track record of allowing malware in your network, and here you see a confused and aggravated webmaster who thinks their website is infected with something when it's your fault. Just sad.
     
    MrBrian, Dec 11, 2008 IP
  18. flatroxs

    flatroxs Banned

    Messages:
    396
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    0
    #18
    flatroxs, Dec 12, 2008 IP
  19. tong1991

    tong1991 Peon

    Messages:
    215
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #19
    Is there a certain program out there that can scan my code to tell me where it is? As I am just learning php and html?
     
    tong1991, Dec 13, 2008 IP