How do i remove malware attack from the website ?

Discussion in 'Security' started by ajay009ajay, Oct 29, 2010.

  1. #1
    Hi, My website is showing malware attack this is not opening presently ? Why this came and how will i remove it ? Please help me and give me some idea to remove this error .
    Thanks
     
    ajay009ajay, Oct 29, 2010 IP
  2. dark_horse

    dark_horse Peon

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    It also happened to me. First of all check .htaccess file. If there is malicious code remove it. Don't forget to see the scrollbar. Check it's permission. It should be set to 644.

    Do not save your password with FTP program. Try to use secure FTP.
     
    dark_horse, Oct 29, 2010 IP
  3. SolidServ

    SolidServ Peon

    Messages:
    34
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Check all youre files for encoded javascript code and if you need help ask your host.
     
    SolidServ, Oct 30, 2010 IP
  4. gopkris2000

    gopkris2000 Peon

    Messages:
    86
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    This hacking does not takes place by any PHP application vulnerability nor any kernel bug nor apache bug nor cpanel or Plesk bug. Those accounts files are affected whose FTP logins are leaked.
    1)Just change the FTP password and this HACK WILL STOP
    2) Change the FTP
    3) Clean format the PC
     
    gopkris2000, Nov 2, 2010 IP
  5. BeardConstance

    BeardConstance Peon

    Messages:
    47
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    check all java scripts are woking and then try to find the htaccess file [ be secure ] then try t find the problem also make a search on google
     
    BeardConstance, Dec 20, 2010 IP
  6. 3mints.info

    3mints.info Well-Known Member

    Messages:
    344
    Likes Received:
    13
    Best Answers:
    1
    Trophy Points:
    135
    #6
    add your site to google webmaster tools account, then you'll find a message in the google webmaster account showing you where are the infected files.
    Clean them then click on the same message and check the box that you cleaned your site.
     
    3mints.info, May 7, 2011 IP
  7. AdWorkMedia

    AdWorkMedia Member

    Messages:
    76
    Likes Received:
    1
    Best Answers:
    1
    Trophy Points:
    28
    #7
    You can also download all files to your computer and have your anti-virus program detect them for you. It should happen in real time as you download them to your computer, just make sure you're running a decent anti-virus like AVG (free).

    Then clean the files (remove the ugly javascript) and re-upload to your server.
     
    AdWorkMedia, May 10, 2011 IP
  8. vintez

    vintez Guest

    Messages:
    1
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Hi Ajay,

    write following in your .htaccess file :

    RewriteEngine on
    RewriteCond %{QUERY_STRING} ^.*(;|<|>|'|"|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|cast|set|declare|drop|update|md5|benchmark).* [NC]

    and get out of it from any further attack.
    please read following for complete review:
    www.vintez.com/blog/2011/05/remove-malware-attack-from-website
    Thanks..
     
    vintez, May 25, 2011 IP