What scripts are you using? Are you using any CMS like Wordpress or Drupal and is it updated to the latest release?

i'm using wordpress latest version. I keep them updated.

Likely that there is a doorway created by the hacker within your legitimate files. The only sure cure is to delete all files on the server, and replace them with a known good backup. Or install a fresh copy of WP, and rebuild your site.

The alternative is a time consuming hunt through all the files on the server for the rogue code.

Def its something hidding in a legimate file. We just cleared one moments ago for another WF member. Tracking it down is a whole other animal and very time consuming for most and normally more then 1 file. They are pesky...

Suggestion by Jez is correct the fastest way is a do-over but there are way of doing quicker if you know what you are doing.

every time there is an attack, I did a fresh install for all existing applications, even the theme I also replace with new. but it still happened again and again. I even frequent contact admin webhosting.

I use Hawkhost, give me a review of Hawkhost

Keep the WP version updated and continually keep track of latest malware attacks and threts is the only way. But, after an infection, its really hard to find the infected files. So better prevent attacks before.

Points to the theme or plug-in you are using is probably your problem.

I think you should be ask to your hosting technical support. Or you can request additional security networking and also install antivirus special for website.

Hello,

the reason you get hacked over and over is that you run vulnerable code or plugins on your site.

1. Go over your permissions and make sure there are no accounts that you are not aware.
2. Change your admin password.
3. Security audit your site/blog with Web application security scanner.
4. Correct identified problems.

regards,

so11

Go to this site here Sucuri SiteCheck - Free Website Malware Scanner
Input your sites url - web address.
You will then get a report that will highlight what malware is lurking on your site.

What do you mean "malware attacts"? Do you mean your web server has been shelled (a tool uploaded by hackers to control the server)? What exactly occurs?

You need to install some security system in your site in order to avoid this type of situation.
If you are using wordpress then you can do that by adding any plugins that will do that work.

Hello,

Malware always effected the main functions files.. it will add the malware script in all the files which will using a functions... and will not effected the database only files.

So always take a precautions to remove the malware.
1. First if you have a backup of the site that will be good otherwise you will take a backup of the site.
2. remove the malware script that always added in function file some the like
function(){
eval('asdasd^&sadashj');
}
3. Then remove the all the files from server.
4. Change the all the username/passwords like cpanel/FTP/Database.
5. Re-upload the files and change the site admin username/password.

That's it.
If you want my help the PM me or contact me Via Skype/Gtalk: ashishkg17

Thanks

Regularly checking and upgrading your website is the best way to protect from malware.

I always use sucuri.net to check site............

Sucuri.net are good for cleaning up your site... USD89 for one years subscription where they will clean your site every time it's infected...

Also you can check the WordPress Security Checklist that I've written... should tighten up your site to prevent it from happening again... see The WordPress Security Checklist

[DELETED]

[DELETED]

I've had the same problem with ALL 3 of my hosting.

I've cleaned up the files, but they got infected again. The only thing that worked was changing the FTP pw.

And don't forget to clean up your computer of trojans! I think the best is MalwareBytes, worked for me and it's also free!

I have read this yesterday here from another guy seems this Malware attaks are popping up these days.

I hope you can fix your Problems!