samergains
11-02-2011, 08:37 AM
Hi everybody,
my forum is infected with a virus called HTML/Rce.Gen
it looks like only the home page is infected but i'm not sure. i'm getting a warning message from the anti-virus only on the homepage.
by viewing the source code of the homepage I found a javascript block added after the end of the html code.
any ideas about finding the infected files in my forum?
is there any method to remove the virus from admincp?
here is a link to give you some details about the virus:
http://www.threatexpert.com/report.aspx?md5=3f9d5c1feb3264b6a27f16a20c7b351a
--------------- Added 1320228975 at 1320228975 ---------------
i found the javascript block in 'FORUMHOME' template and deleted it.
Now it's working fine but i'm not sure this is enough to protect my forum.
any suggestions for more security?
my forum is infected with a virus called HTML/Rce.Gen
it looks like only the home page is infected but i'm not sure. i'm getting a warning message from the anti-virus only on the homepage.
by viewing the source code of the homepage I found a javascript block added after the end of the html code.
any ideas about finding the infected files in my forum?
is there any method to remove the virus from admincp?
here is a link to give you some details about the virus:
http://www.threatexpert.com/report.aspx?md5=3f9d5c1feb3264b6a27f16a20c7b351a
--------------- Added 1320228975 at 1320228975 ---------------
i found the javascript block in 'FORUMHOME' template and deleted it.
Now it's working fine but i'm not sure this is enough to protect my forum.
any suggestions for more security?