[support] Malware issues- is there any permanent solution

[KOBA | Hans Rossel]

Check if there is a <?php eval('...') ?> on top of index.php and remove it.

Hans
Www.koba.be

2010/4/20, Evelien Fick <lijsten at veel-in-een.nl>:
> Did you change your ftp credentials after removing the script?
> Next you need to find the script that's vulnerable.
> That can be located at your site but if you're on share server it could be
> on any other site. You need to contact the provider to make sure everything
> is right.
>
> Evelien
>
> Op 20 apr 2010 07:30 schreef "sushyl" <sushyl at gmail.com>:
>
> HI,
> I am having malware problems with all my drupal sites. A piece of code gets
> inserted in all or some javascript(.js) files. Its happening even to the
> files with permissions "644". I have to remove the code and submit the site
> for review on webmaster tools on google, so that mozilla-firefox does not
> give malware. It takes 2-3 days. This is happening again and again, and i
> have to repeat same process each time. Is there any permanent solution for
> this issue?
>
> I am giving the code that gets into the files. Sometimes the links in that
> code are different.
>
> Thanks
> --
> Sushil Hanwate
>
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>


-- 
Hans Rossel
KOBA Webdesign bvba
Beukenlaan 56
9051 Gent (Sint-Denijs-Westrem)
Belgium
BTW 0817.931.516
+32.9.334.52.60
+32.472.79.32.16
www.koba.be
info at koba.be