Trojan-Downloader.JS.Psyme.hz

Discussion in 'Security' started by Lastbutnotleast, Aug 12, 2007.

  1. #1
    I have an hosting account at OXEO.com and I have trojan problems on all my websites

    The index files of all my websites show a Trojan program called Trojan-Downloader.JS.Psyme.hz

    I checked my websites on Google and Google is warning users for this kind of problems for one of my websites

    Does anybody here has experienced the same problem ?

    (no problem with my other sites hosted at DREAMHOST or elsewhere)
     
    Lastbutnotleast, Aug 12, 2007 IP
  2. powerspike

    powerspike Peon

    Messages:
    312
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #2
    you should remove the code for the tojan as soon as possible.

    also try and find out how they installed it into your site in the first place.

    just as a extra step - try setting all your files to read only, it doesn't always work, but it gets around a few of the scriptkiddies.
     
    powerspike, Aug 12, 2007 IP
  3. Lastbutnotleast

    Lastbutnotleast Peon

    Messages:
    2,612
    Likes Received:
    105
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Thanks for the help powerspike ;)

    I found this on a forum

    I can't believe it !!!
     
    Lastbutnotleast, Aug 12, 2007 IP
  4. powerspike

    powerspike Peon

    Messages:
    312
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #4
    your welcome =)

    i don't think it's only inactive accounts that have the problem, some big name sites have had trojans put into their sites by hackers in the past. Just set a password that isn't easily guessable and you'll be a step up.
     
    powerspike, Aug 14, 2007 IP
  5. jessecooper

    jessecooper Peon

    Messages:
    793
    Likes Received:
    33
    Best Answers:
    0
    Trophy Points:
    0
    #5
    ya kapersky shot me warning and stopped the site when i tried to visit paiddirectorylist.com

    same virus
     
    jessecooper, Sep 12, 2007 IP
    vegabond likes this.
  6. vegabond

    vegabond Shabu Anower

    Messages:
    1,656
    Likes Received:
    289
    Best Answers:
    0
    Trophy Points:
    240
    #6
    Now site is OK, I have reported my hosting company already regarding this. Will post a ticket again about the latest update.

    Thanks for your notice :)
     
    vegabond, Sep 14, 2007 IP