Re: [support] Malware issues- is there any permanent solution
Did you change your ftp credentials after removing the script? Next you need to find the script that's vulnerable. That can be located at your site but if you're on share server it could be on any other site. You need to contact the provider to make sure everything is right. Evelien Op 20 apr 2010 07:30 schreef "sushyl" <sushyl@gmail.com>: HI, I am having malware problems with all my drupal sites. A piece of code gets inserted in all or some javascript(.js) files. Its happening even to the files with permissions "644". I have to remove the code and submit the site for review on webmaster tools on google, so that mozilla-firefox does not give malware. It takes 2-3 days. This is happening again and again, and i have to repeat same process each time. Is there any permanent solution for this issue? I am giving the code that gets into the files. Sometimes the links in that code are different. Thanks -- Sushil Hanwate -- [ Drupal support list | http://lists.drupal.org/ ]
Check if there is a <?php eval('...') ?> on top of index.php and remove it. Hans Www.koba.be 2010/4/20, Evelien Fick <lijsten@veel-in-een.nl>:
Did you change your ftp credentials after removing the script? Next you need to find the script that's vulnerable. That can be located at your site but if you're on share server it could be on any other site. You need to contact the provider to make sure everything is right.
Evelien
Op 20 apr 2010 07:30 schreef "sushyl" <sushyl@gmail.com>:
HI, I am having malware problems with all my drupal sites. A piece of code gets inserted in all or some javascript(.js) files. Its happening even to the files with permissions "644". I have to remove the code and submit the site for review on webmaster tools on google, so that mozilla-firefox does not give malware. It takes 2-3 days. This is happening again and again, and i have to repeat same process each time. Is there any permanent solution for this issue?
I am giving the code that gets into the files. Sometimes the links in that code are different.
Thanks -- Sushil Hanwate
-- [ Drupal support list | http://lists.drupal.org/ ]
-- Hans Rossel KOBA Webdesign bvba Beukenlaan 56 9051 Gent (Sint-Denijs-Westrem) Belgium BTW 0817.931.516 +32.9.334.52.60 +32.472.79.32.16 www.koba.be info@koba.be
participants (2)
-
Evelien Fick -
KOBA | Hans Rossel