Website infected - how to fix it?

[ThumperTM]

h3llo,

Few of my friends told me that kaspersky,nod32 etc reports Trojan @ www.hotwallpapers.me

I have already scanned my server files but scan comes clean...

Anybody know how to fix that?

Thank you.

 

[Long]

hey man, it's in an iframe.

download you index and take a look see, remove the iframe code, re-upload the index and then change your FTP password.

 

[googleplus]

do u own this site ?

 

[ThumperTM]

^^ Yep

 

[amerriaz]

i am not getting any virus alert but leave imgshake your site look so cheap with frogs

 

[loki]

<iframe
scrolling="no" frameborder="0" width="280" height="280" src="http://www.facebook.com/connect/connect.php?id=178656962230842&amp;connections=10&amp;stream=false&amp;header=false&amp;locale="></iframe>

remove this?

 

[ThumperTM]

i am not getting any virus alert but leave imgshake your site look so cheap with frogs

^^ huh? Cant understand what you mean?

 

[loki]

if you remove that from index , warnings will stop

 

[amerriaz]

 

[ThumperTM]

Shit :facepalm:

http://screensnapr.com/e/duOEfG.jpg

seems like imageshack blacklisted your country?

---------- Post added at 07:41 PM ---------- Previous post was at 07:40 PM ----------

if you remove that from index , warnings will stop

loki i cant find it on index :S

 

[amerriaz]

<_< ^o) (

 

[ThumperTM]

I'm off now... if someone have idea where the fuck iframe is comment here lol

Thanks

 

[avRo]

edit all ur php files

 

[Isumeru]

this is the address that shows up as infected. I had a problem like that before and as it turns out almost all my index.php files had 777 permisions so bots/hackers or whatever were able to write a small piece of code which was base64 encoded, I suggest checking your permissions and if possible to show your index.php here.

I'm guessing your used this "free" SEO service?

stepbysteprankings[dot]com

 

[Kat]

Sorry did not see the post above till after i posted mine .

Opps a Just a little late .

 

[kuskka]

Sometimes this site can be helpful to find where the virus is coming from: http://sitecheck.sucuri.net/results/www.hotwallpapers.me

 

[DoggY DoG]

dude why didn't you remove the iframe code when asked to? Now sorry to say but those who are using kaspersky can't open your site and will not open your site now because we got fed up of getting trojan error.

 

[Tango]

I have looked before, you the code must be from a custom 404 error page set somewhere.

If there is a dead image alternate code is added that triggers the AV.


Come on MSN later and i will sort it

 

[ThumperTM]

Still not fixed

---------- Post added 15th Apr 2012 at 12:35 PM ---------- Previous post was 14th Apr 2012 at 02:23 PM ----------

I think is fixed now... Can you guys check if AVAST or Nod32 or kaspersky still reports trojan @ www.hotwallpapers.me?

Thanks.