XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. Q and A 
  4.  / Virus
Register
1
cabdi_uk
Virus

  • 2009/1/17 16:27

  • cabdi_uk

  • Just popping in

  • Posts: 28

  • Since: 2007/6/12


My web has been hacked and I think there is virus in it. I have checked few files such as teh theme index.php, index.html, banner, etc but cant find where the infected file is. Anyone who accesses my web site is blocked by some antivirus softwares like sophos with the threat name as Mal/ObfJS-Bl.

When I launch my site, there is also these access attemys res://ieframe.dll/dnserror.htm... .

I will appreciate any advice.

Thanks

Abdi
2
ghia
Re: Virus

  • 2009/1/17 17:42

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


In your browser select 'view page source' and in the html source search for frame. Mosttimes you will find an iframe to a foreign website. The surrounding code should give you an idea where it is located. This is mosttimes in one of your theme or template files, but it can be in the database too as in eg the admin - preferences - system - header and footer settings.
3
cabdi_uk
Re: Virus

  • 2009/1/17 22:28

  • cabdi_uk

  • Just popping in

  • Posts: 28

  • Since: 2007/6/12


Thanks Ghia.

I found an errant script that modified the index.php withhttp://*********/q/urchin.js. After deleting this all seems to be fine.

Thanks

Edited by Ghia: Don't publish SPAM domains.
4
ghia
Re: Virus

  • 2009/1/18 2:12

  • ghia

  • Community Support Member

  • Posts: 4953

  • Since: 2008/7/3 1


Quote:
After deleting this all seems to be fine.
No, it is not!
If you don't know how this alteration of your server has been done and not barred this entry vector, then it means you can get infected at any time again!
Read some threads and act!
5
cabdi_uk
Re: Virus

  • 2009/1/18 2:31

  • cabdi_uk

  • Just popping in

  • Posts: 28

  • Since: 2007/6/12


Thank you very much Ghia. I will make efforts to take the necessary steps. You are a big asset in this community !!!

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

198 user(s) are online (135 user(s) are browsing Support Forums)

Members: 0

Guests: 198

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits