<iframe injection> attack through ftp

Hello,

My website was recently attacked by <iframe> injections. As a result Google put it into the list of suspicious websites. On searching the internet and inquiring from my webhost, I came to know that some malicious malaware was using my ftp access (from the computers I used) and was replacing the index.htm/php files of my websites with an <iframe> containing page.

Though my webhost support removed all the instances of that <iframe> from my websites pages, they advised me that it happened from my own computers and I should scanned my PC for all such infections.

I use two PCs for my ftp access. One is at my home, the another one is at my office (both have XP professional installed). The PC at office was not using any antivirus whereas my home PC has full functional AVG 8.5 installed. Therefore, I thought that the malicious malware must be in my office PC as it was not protected. So I sent this PC for a complete reformatting and fresh install to remove all instances of this malware. As a further protection, I run a full system scan of my home PC using AVG 8.5. After doing this, I was hoping that this problem was solved.

However, just after two days my website was again banned by Google for spreading a malicious virus. This time a different <iframe> Injection was used to insert the malicious code in all the index pages.

As I have already reformatted my Office PC, the only place where this culprit is hidden must be my home PC (which is having a fully functional licensed copy of AVG 8.5 installed). It was a bit shocking for me that my AVG 8.5 is not able to protect (or even detect ) this malaware from my PC.

Now as advised in this and this majorgeek articles I have installed five anti spyware viz. SUPERAntiSpyware, Malwarebytes Anti-Malware, Combofix, Rootrepeal and MGTools and have run/clean my home PC using them.

Please find attached scan logs of these tools and advise whether everything seems Ok in my computer or I still needs to do some more cleaning of my system to get rid of any malicious walware.

The four logs attached are for : SUPERAntiSpyware, Malwarebytes Anti-Malware, Combofix and Rootrepeal.

 

Further, as we are allowed to attached 4 files one time, here is the last scanlog for MGTools.

 

Thanks for reviewing my logs. Yes the problem appears to end after these scans.

Thanks a lot to MajorGeeks for providing such excellent and detailed tutorials in the matter.

Regards

Eklavya