Javascript Trojan Virus Everywhere and How to fix it
Its getting hit by Trojan virus:
Read the News about Thousands of infected websites.
A lot of sites are now being attacked with JavaScript Trojans
the server is not attacked by virus , this happens to both Linux and windows server sites.
so it is doesnt look like a server based attack
How this happens?
when the computer from where you upload data thru FTP/fp is infected , it injects some JavaScript to all html files.
so how you can prevent this happening is keep your pc up2date by having recent antivirus,antispyware and then change your ftp logins.
If there is a Repeating same pattern of JavaScript on 100s of your files you have a shell script for Linux server users that can remove these injected javascript .
so you can request your host or you yourself can run this on your shell
find ./ -type f -exec sed -i ‘/unescape/d’ {} \;
this command will remove all the lines with pattern ‘unescape’
some virus has lines of function okban, in that case you can try pattern ‘okban’
it depends on your need.
you can do the same with a software called GrepWin for replacing/searching PERL Regular Expression patterns on your files
http://tools.tortoisesvn.net/grepWin
use it to search for patterns and replace with null or use the options to delete those lines
this can be either used on a windows server or client side (but then you have to upload all modified files again )
You must be logged in to post a comment.