Re: Forum Infected by Virus - A trojan on My Board
We had this problem a few months ago and it was a pain to remove - what you will find is that in every index file this code will eventually be loaded and in every directory you will also probably find a php file with a number or weird name - you can usually remove them with ftp, BUT, the file that causes the most problem is the htaccess file which this hacker script injects into every directory - I had to use shell access to be able to see the htaccess files and manually delete every file as well.
In our case the hosting company initially told us that it was all our fault and nothing to do with them, then after I took the whole website down (including about 300,000 images), cleaned it all out and rebuilt the site using all the latest software upgrades, the hosting company sent out a letter saying how proactive they were and had caught this attack and cleaned it on 23,000 sites they host.
To say the least we were not impressed.
However, contact the hosting company straightaway and tell them, as they may be able to strip the bogus php files and htaccess files quickly for you, else you may have a laborious process removing them all yourself.
Also put your site into maintenance mode if you can else you will begin infecting visitor computers - we also had this and had a warning coming up from Google to say we were not safe to visit, which seriously impacts on profits quite quickly until being reinstated.
Good luck
|