Greenguy's Board
(
http://www.greenguysboard.com/board/index.php
)
-
General Business Knowledge
(
http://www.greenguysboard.com/board/forumdisplay.php?f=10
)
- -
<iframe> Malware infection - Need HELP removing, PLEASE
(
http://www.greenguysboard.com/board/showthread.php?t=53949
)
papafreakshow
2009-08-09 06:12 PM
<iframe> Malware infection - Need HELP removing, PLEASE
I have some sort of
Malware infection that I need help removing.<br /> <br /> The code has automatically attached itself to every saved .htm document on my computer, and everytime I open Frontpage the code automatically pops up (in new documents and previously created files).<br /> <br /> I can open my documents in wordpad (and frontpage) erase the code, save the file, and view it again and find the code still there.<br /> <br /> Ive ran a full virus scan, fixed any issues, but nothing fixed the <iframe> problem.<br /> <br /> I edit in Frontpage, but even open my files in Dreamweaver, find the code there, erase it, and still it appears like I never erased it.<br /> <br /> I thought about removing Frontpage - but if it's happening in Dreamweaver too, I'm not so sure removing Frontpage will do anything constructive.<br /> <br /> Any help anyone could offer would be appreciated!</div> </td> </tr> </table> <br /><table class="tborder" cellpadding="6" cellspacing="1" border="0" width="100%"> <tr> <td class="page"> <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr valign="bottom"> <td style="font-size:14pt">~NH~</td> <td class="smallfont" align="right">2009-08-09 06:12 PM</td> </tr> </table> <hr /> <div><a href="http://www.malwarebytes.org" target="_blank">http://www.malwarebytes.org</a></div> </td> </tr> </table> <br /><table class="tborder" cellpadding="6" cellspacing="1" border="0" width="100%"> <tr> <td class="page"> <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr valign="bottom"> <td style="font-size:14pt">cd34</td> <td class="smallfont" align="right">2009-08-09 07:11 PM</td> </tr> </table> <hr /> <div><div style="margin:20px; margin-top:5px; "> <div class="smallfont" style="margin-bottom:2px">Quote:</div> <table cellpadding="6" cellspacing="0" border="0" width="100%"> <tr> <td class="alt2"> <hr /> <div> Originally Posted by <strong>papafreakshow</strong> (Post 460201) </div> <div style="font-style:italic">The code has automatically attached itself to every saved .htm document on my computer, and everytime I open Frontpage the code automatically pops up (in new documents and previously created files).</div> <hr /> </td> </tr> </table> </div>change your FTP password<br /> scan your machine for trojans/spyware/malware or figure out how your FTP password was given to hackers (they didn't randomly stumble across it, they got it from somewhere -- vendor that installed software for you, worker that uploaded files, spyware/keylogger, etc)<br /> clean up your files or have your host restore a backup<br /> change your FTP password to something more unique<br /> <br /> You're changing it after the scan just in case they got the new password and you find some malware on your machine. <a href="http://www.avast.com/" target="_blank">http://www.avast.com/</a> is also pretty good and free for 30 days then requires registration.</div> </td> </tr> </table> <br /><table class="tborder" cellpadding="6" cellspacing="1" border="0" width="100%"> <tr> <td class="page"> <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr valign="bottom"> <td style="font-size:14pt">Allfetish</td> <td class="smallfont" align="right">2009-08-09 09:34 PM</td> </tr> </table> <hr /> <div>Windows I presume?<br /> <br /> 1. Get AVG Feee <a href="http://free.avg.com" target="_blank">http://free.avg.com</a> and run checks in both safe mode and normal mode. Do one iteration of both first.<br /> <br /> 2. Install a rootkit detector and remover (or two or three) and do deep scans with them.<br /> <br /> <a href="http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html" target="_blank">http://www.sophos.com/products/free-...i-rootkit.html</a><br /> <br /> <a href="http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx" target="_blank">http://technet.microsoft.com/en-us/s.../bb897445.aspx</a><br /> <br /> <a href="http://www.google.com/search?hl=en&q=rootkit+detector+free&aq=f&oq=&aqi=g1" target="_blank">http://www.google.com/search?hl=en&q...q=f&oq=&aqi=g1</a><br /> <br /> 3. Run AVG again in both safe mode and normal mode until both scans show clean<br /> <br /> 4. Change all passwords.<br /> <br /> 5. Now fix your HTML files once you have a secured system. If you cannot get it secured you may have to reinstall. Actually reinstalling is the safest thing! Once there is a root/admin level security breach anything but a full reinstall is risky because there is a chance you might miss something.</div> </td> </tr> </table> <br /><table class="tborder" cellpadding="6" cellspacing="1" border="0" width="100%"> <tr> <td class="page"> <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr valign="bottom"> <td style="font-size:14pt">Licker4U</td> <td class="smallfont" align="right">2009-08-09 11:01 PM</td> </tr> </table> <hr /> <div><div style="margin:20px; margin-top:5px; "> <div class="smallfont" style="margin-bottom:2px">Quote:</div> <table cellpadding="6" cellspacing="0" border="0" width="100%"> <tr> <td class="alt2"> <hr /> <div> Originally Posted by <strong>cd34</strong> (Post 460207) </div> <div style="font-style:italic"><a href="http://www.avast.com/" target="_blank">http://www.avast.com/</a> is also pretty good and free for 30 days then requires registration.</div> <hr /> </td> </tr> </table> </div>I'm still using the free version and it keeps saving me. |thumb</div> </td> </tr> </table> <br /><table class="tborder" cellpadding="6" cellspacing="1" border="0" width="100%"> <tr> <td class="page"> <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr valign="bottom"> <td style="font-size:14pt">Senator_x</td> <td class="smallfont" align="right">2009-08-11 06:31 PM</td> </tr> </table> <hr /> <div>Get another computer with a clean install of your OS. Install your programs and copy over your files. Make sure you scan the files before copying over.</div> </td> </tr> </table> <br /> <br /> <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr valign="top"> <td class="smallfont">All times are GMT -4. The time now is <span class="time">04:15 AM</span>.</td> <td align="right"> <div class="smallfont"></div> </td> </tr> </table> <p class="smallfont" align="center"> Powered by vBulletin® Version 3.8.1<br />Copyright ©2000 - 2025, Jelsoft Enterprises Ltd. <br /> © Greenguy Marketing Inc </p> </body> </html>
