Options

Iframe Virus

Unknown
edited August 2009 in Spyware & Virus Removal
Hi,

I am getting an iframe attached on my web pages and having problems getting rid of this type of virus. The iframe attaches itself to all index.html pages in my webserver.

I have full access to my webserver but i still cannot locate the virus.

Has anybody had a similiar problem??

Thanks in advance.

Cy

Comments

  • KatanaKatana
    edited July 2009
    Hi Cybotron,

    I'm guessing that you use WordPress on your site ?

    It is a known exploit of WordPress, and you won't be able to remove the problem until you upgrade WordPress or remove all the WordPress files
  • cybotron
    edited July 2009
    Hi Katana,

    Thanks for the input.

    I have deleted wordpress files off my server as i was not using them, hopefully it solves the issue.

    Thanks again. :thumbup:thumbup:thumbup:thumbup:thumbup:thumbup

    cy
  • KatanaKatana
    edited July 2009
    You still need to edit all the index.html files to remove the iFrame that was inserted,
    but they shouldn't be reinfected now.
  • cybotron
    edited August 2009
    katana,

    I removed all word press files and then re-uploaded all my sites again with out the iframe and it was ok.

    But the virus has returned and i dont know what to do next.

    Any ideas?

    Thanks,

    Cybotron
  • KatanaKatana
    edited August 2009
    Please PM me with the name of the site.
  • KatanaKatana
    edited August 2009
    I visited the site last night, and again today.
    There doesn't appear to be any problems now.

    Are you still getting the iFrame warning ?
  • cybotron
    edited August 2009
    Hi,

    I have not got any iframe warning on the site i sent you but i do have one on another website which resides on the same server.

    I have sent the url to this website by pm to you.

    Thanks,

    Cy.
  • KatanaKatana
    edited August 2009
    Have you removed all the WordPress files from that site and then edited the index.html's ?
  • cybotron
    edited August 2009
    Yes, I did that yday morning but its come back again today.
  • cybotron
    edited August 2009
    I have just re-uploaded the files again for the website that was infected. Lets see wot happens. Fingers crossed.
  • cybotron
    edited August 2009
    Hi Katana,

    The virus has returned.

    Do you think its got anything to do with a php forum that i am using on one of my sites?

    Could my pc be infected with this iframe virus so when i upload from my hard drive to the server it somehow infects again?

    Thanks,

    Cy
  • KatanaKatana
    edited August 2009
    Since something is reinfecting the site, you had better visit Stopbadware
    It is a site that deals with server infections.
Sign In or Register to comment.