3
Thanks Herko,
that is a shared server. See what tech support says:
Message 1:
The file /home/httpd/vhosts/legalis.hr/httpdocs/index.php contains or is trying to load a virus. Our anti-virus system picked it up immediately when trying to load your site. A few files and folders on your site were modified on 01/02/2006 and I see old files from 2003. I believe you are using an old version of xoops. If so, it probably has security vulnerabilities which someone exploited to gain access and modify files on your domain. Please always keep your scripts up to date to avoid situations like this.
Any visitors to your site over the past couple of days, who are not running any anti-virus software, will have been infected with the virus.
Message 2:
Unfortunately we cannot trace how the script was exploited. I suggest either upgrading the XOOPS installation or stop using it as it will more than likely occur again now that hackers are aware of your vulnerable installation.
I do not know what to think anymore. Originally that was 1.3.8 instalation upgraded to 1.3.9. When that happend I patched it to 1.3.10 but same thing is happening again.
Site is Hosted with a preety high tech US hosting company and I beleive that they posess quite good virus protection.
Thanks for any suggestion.