ASP - Malware

[cocoonfx]

Hi Chaps


I have been asked to clean some websites built in ASP of malwere which google has blocked. The server there on does not have any anti virus which is not very helpful. However the malware seems to have a script which adds links to other dodgy sites by using document.write in all the java files. I can identfy the pages no problem but I can not track the source of the malware, as I clean a site its ok for 2 weeks and then it comes back. It good for me as I get paid every time i clean them but I do actually want to find get to the route of the problem.

Does anyone know any software or scripts I can run on the root of the VPS or on the sites, to get rid of this virus?

[mangofreak]

I had similar problem to your and found that the best solutions was to change the write permissions so no one could write anything to the my files. This did not affect content because it was all in a db and since all is fed from the db the files were intact and worked great. Any modification to the files was made locally and before uploading I would change the permissions back to write and changed the file.

Also, you should protect all your input forms.

Perhaps you should also considering how effective the server security is. Changing to another webhost where security is better would be a good option.

[daviddwillson]

great news, i love my seed upgrade.



Any one?

To be continued....

[andrewetheridge]

What kind of Malware is it?

[edbr]

this post is 7 years old