Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: brodiewf on August 26, 2011, 03:22:26 PM

Title: Virus on my website: please help
Post by: brodiewf on August 26, 2011, 03:22:26 PM
People keep detecting a virus on my website. The details will be below. I contacted my host; they did a scan and found nothing. Both my host and I downloaded my website to a secure clean computer and scanned it, cleaned up the junk and put the site back up. However the virus is still detected. I use justhost.com for my hosting. The virus us picked up as a Trojan, this is what MS security essentials says, my host is aware of this and they told me to contact the forums here and see if someone can help me.

my website is www.ontarioregimentgaming.com (http://www.ontarioregimentgaming.com)

Trojan:JS

Category: Trojan:JS/Blacole:Ref.A

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the Allow action and click Apply actions. If this option is not available, log on as administrator or ask the security administrator for help.

Items:
file:C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\05JUVRXW\forum[1].htm

Please help.

Title: Re: Virus on my website: please help
Post by: Illori on August 26, 2011, 03:33:50 PM
you have many ads and modules on your forum due to using a portal, try to disable the portal and the ads and see what works. also please change the color of the text of your copyright if you wish to have further support.
Title: Re: Virus on my website: please help
Post by: kat on August 26, 2011, 04:30:49 PM
For what it's worth, I just went for a rummage around, at your site.

I got no warnings, at all. :)
Title: Re: Virus on my website: please help
Post by: Illori on August 26, 2011, 04:45:49 PM
i got a warning here with avast anti-virus and checked the site on my macbook to be on the safer side.
Title: Re: Virus on my website: please help
Post by: kat on August 26, 2011, 04:47:55 PM
Hmmm... I use Avast, too.

Odd.
Title: Re: Virus on my website: please help
Post by: TheListener on August 26, 2011, 04:53:47 PM
Hope this helps but I also use avast and received a warning.

js:Redirector-HX [Trj] is what the avast details gave as the cause.

Could it be one of the adverts?
Title: Re: Virus on my website: please help
Post by: Illori on August 26, 2011, 05:14:13 PM
i have an ad blocker on my opera and i got the warning so i am not sure it could be one of the other modules from the portal causing issues.