Strange JS file injection on my website !!

Discussion in 'JavaScript' started by mhrlive, Apr 9, 2013.

  1. #1
    Hello,
    just found that my website got some strange js file request :
    <script type="text/javascript" src="http://shpr.co/code/fsave/js/fs.js?subid=298&ex=35&uid=51631fc4a44ae5.65956870">
    Reload the page to get source for: http://shpr.co/code/fsave/js/fs.js?s...44ae5.65956870
    </script>
    Code (markup):
    Please help me to remove that !​

     
    mhrlive, Apr 9, 2013 IP
  2. creativeD

    creativeD Member

    Messages:
    37
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    43
    #2
    If you suspect that the code is malicious you'll need to do a couple of the following:
    • Upgrade all software on your website to the latest versions
    • change password for your ftp/control panel accounts
    • Have a coder look over your site and build something to clean infected files
    Good Luck.
     
    creativeD, Apr 10, 2013 IP
  3. Basti

    Basti Active Member

    Messages:
    625
    Likes Received:
    6
    Best Answers:
    3
    Trophy Points:
    90
    #3
    Have read somewhere that this is a issue on your pc. Specificly a unsecure browser addon. Appears its malware on your pc, who locally infect those files into every website you load as long as it runs other javascript.
    Dont take me 100% for it though, just what ive found on google. Just incase get the demo of kaspersky 2013 and let it run a scan to make sure if its on your pc or not
     
    Basti, Apr 11, 2013 IP
  4. mhrlive

    mhrlive Active Member

    Messages:
    64
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    73
    #4
    Hello, infection was on my PC, addon, not on the application or the server, installed kaspersky Internet 2013 and everything is fine :)
     
    mhrlive, Apr 11, 2013 IP