Trojan removal HELP needed

[Tommy]

Originally Posted by cd34

Sources for your password leak: People that have installed software for you in the past, anyone that has had FTP access to your machine, possibly any keylogger on your system.

A lot of webmasters have been getting hacked like this

I would bet the source of the password leak is a sponsor

[tickler]

Originally Posted by Tommy

I would bet the source of the password leak is a sponsor

Timing is about the same as all these spam emails??? And all the ones that I have been getting are for an address that I setup for a sponsor.
eg. ThatSponsor @ MyDomain.com

[frankthetank]

Originally Posted by Tommy

A lot of webmasters have been getting hacked like this

I would bet the source of the password leak is a sponsor

Yes, you are right. I used the same login / password combination at some sponsors. OK, now I learned that was pretty stupid, but on the other hand I didn´t expect it.

I´m now using unique login / password combinations, changing the password regularly and my passwords are now complicated and much more difficult to guess.

Not all my sites were infected. Not sure enough to accuse him publicly, though.

Fortunately not even one gallery was modified with the script. The script forced the installation of an "start.exe" which connected to a site hosted at "inhoster.com". I don´t think it´s worth to contact them if you have a look at their site.

The site called us-counter.com and dnv-counter.com belong to a guy from Ukraine and are blacklisted with several records. IP´s from the sites and from the hosting company are pretty much the same.

I´d like to close down that hoting company for sure. Those behaviour easily ruins the reputation of persons involved.