Virus on website - how to remove and prevent?

18 replies
Someone has put a virus on one of my websites.

Anyone know how to get rid of it without rebuilding the whole site and how do I stop it from happening again?
#prevent #remove #virus #website
  • Profile picture of the author Steven Fullman
    More details, please.

    One question for starters...how did they get the virus on your site?

    How are you sure it's a virus? What does this 'virus' do?

    Has your webserver been physically compromised?

    Do they have usernames/passwords?

    What's the deal?

    Steve

    P.S. Yes...that's 6 questions...not one. Sorry.
    Signature

    Not promoting right now

    {{ DiscussionBoard.errors[69336].message }}
    • Profile picture of the author Easy Cash
      More details, please.

      One question for starters...how did they get the virus on your site? Dunno. But when I visit it - my virus scanner says it is trying to load a virus. Tried it on 2 machines.

      How are you sure it's a virus? What does this 'virus' do? Comes up with - Mal/Iframe-F and a few others.

      Has your webserver been physically compromised? What do you mean? I use an external webserver party.

      Do they have usernames/passwords? I hope not - they may though

      What's the deal? The Warrior forum seems to have a few viruses floating around. I clicked on someones sig here once and that was the end on my laptop.

      Steve

      P.S. Yes...that's 6 questions...not one. Sorry.
      {{ DiscussionBoard.errors[69355].message }}
      • Profile picture of the author Steven Fullman
        OK...are you running antivirus software, such as Sophos?

        Steve
        Signature

        Not promoting right now

        {{ DiscussionBoard.errors[69362].message }}
        • Profile picture of the author Easy Cash
          On my computers - yes.

          Although the laptop wasn't at the time.

          But all fixed now.

          But on the website - How can I run a virus software on the external server?
          {{ DiscussionBoard.errors[69366].message }}
          • Profile picture of the author Steven Fullman
            Originally Posted by Easy Cash View Post

            How can I run a virus software on the external server?
            Not your problem, and not A problem, as long as you host with a reputable company.

            Servers serve files...that's it. They don't host viruses unless the webmaster (you) puts them there...or...someone has physical or virtual access to your server or login details, and has purposely infected your hosting server (unlikely)

            However, trust no one. Check with your host that no-one except you has logged in to your account lately. They can check by IP address, for example.

            ...as for your scare, sounds like your A/V software was getting a bit shirty about Inline Frames, which are still legitimate html tags...

            Steve
            Signature

            Not promoting right now

            {{ DiscussionBoard.errors[69388].message }}
  • Profile picture of the author Dev99
    Hi,

    I recently i faced this probs in my site i got step by step solution here

    hideveloper.com

    Thanks
    Dev
    {{ DiscussionBoard.errors[2710274].message }}
    • Profile picture of the author PhillTurner
      Hi Gerry

      Outsource it via elance rentacoder or odesk for a few bucks!

      Its so much hassle and not worth hours of your time and you will find hundreds of techies dying to sort it out for you for just a few bucks.

      Last problem I had cost me $20 to sort out.

      Thats what I would do

      I hope that helps

      Phill
      {{ DiscussionBoard.errors[2710426].message }}
  • Profile picture of the author Danny Turner
    I had the same problem - with hostgator - told them - fixed in minutes
    their advice
    change passwords regularly - use a good antivirus- don't leave you passwords stored in your ftp program - that is one way hackers get them
    good luck
    with it
    mmm off to do a site backup
    {{ DiscussionBoard.errors[2710842].message }}
  • Profile picture of the author kloker007
    1. Download a random antivirus program such as avast antivirus or microsoft essential antivirus

    2.Download the whole catalog from your server to your pc
    3. Let your antivirus search and terminate the virus in your downloaded catalog
    4. Delete all files in your server
    5. Re-upload your clean catalog to your server

    Tada

    PS! Remember to take backup if your host don´t can´t do that for U.
    {{ DiscussionBoard.errors[2710983].message }}
    • Profile picture of the author Spacevt
      Originally Posted by kloker007 View Post

      1. Download a random antivirus program such as avast antivirus or microsoft essential antivirus

      2.Download the whole catalog from your server to your pc
      3. Let your antivirus search and terminate the virus in your downloaded catalog
      4. Delete all files in your server
      5. Re-upload your clean catalog to your server

      Tada

      PS! Remember to take backup if your host don´t can´t do that for U.
      What do you mean by whole catalog?
      {{ DiscussionBoard.errors[2726747].message }}
  • Profile picture of the author JMac
    Allow me to direct you to the website in my signature...
    Signature

    Need help with a virus or other malware? Check out my Free Virus Scan and Removal page.

    If you have a few minutes, I would appreciate an opinion on my first real squidoo attempt at my Best Keyboard page.

    {{ DiscussionBoard.errors[2726816].message }}
    • Profile picture of the author J Bold
      Originally Posted by JMac View Post

      Allow me to direct you to the website in my signature...
      Good site you have there, thanks for that.

      Although I didn't check long enough to see if you cover removal of viruses on a website?
      {{ DiscussionBoard.errors[2726832].message }}
  • Profile picture of the author txconx
    Man, no fun. I was given a large website because the owner (a corporation) couldn't figure out how to fix the virus problems they were having.

    Fresh install of the forum script, scan of the database and a new host with better security and the problem was fixed.

    Then there was my job site that got hacked, compromised my dedicated server - and 6 months later, I get an e-mail from the script programmers telling users there was a security hole in the software. Yeah, I kinda figured that out already. A couple thousand dollars and months of hard work down the tube, not to mention the expense of cleaning up my dedicated server, replacing the hard drives, and reloading everything on it including the OS. Sheesh. I hate hackers.

    Your server host should be taking a look at this and if the problems persist, move to a different host. I've had no problem with the forum software since I moved it to a new host.
    {{ DiscussionBoard.errors[2726868].message }}
  • Profile picture of the author carrtune
    get this notification from norton antivirus when i or others view my website.

    An intrusion attempt by 7773.in was blocked. Application path\ DEVICE\HARDDISKVOLUME1\PROGRAM FILES\ INTERNET EXPLORER\IEXPLORE.EXE

    Risk name: HTTP Fragus toolkit download activity
    Attacker URL: 7773.in/1289095035.php

    ive dwnld it from server and scaned it but no threat found and searched through a couple pages of html for unwanted code nothin so far.
    {{ DiscussionBoard.errors[2835370].message }}
  • whatever you do, do it quick. If your site is hosting or sending out malicious software, you'll be penalised by the search engines and will be removed from their results. You could also sign up to Google webmaster tools to see what malware is infecting your site. It could be something else besides malware
    {{ DiscussionBoard.errors[2957125].message }}
  • Profile picture of the author bamidele_ba
    Which host do you use? You might want to contact them.

    You can also do it yourself if you have basic knowledge of php ad MYSQL.
    {{ DiscussionBoard.errors[2957345].message }}

Trending Topics