Gigapros Server Problem?

[MarkD793]

I have been with Gigapros for close to a year and have been generally satisfied.

HOWEVER, I was hit with malware and after gigapros removed the files...I was hit again with in a few days...at least I thought. Tums out they never removed the original corrupted files. Now they say they aren't able to remove the corrupt files and that the tech dept must send it up to a higher dept to correct the problem. This has been going on for 2 weeks. The google warning and threat of malware is destroying my site.

Is anybody else experiencing this problem with Gigapros?

[snakes1100]

Well, it would help if you posted a link so we can view whats going on, it will most likely be a simple fix and easily removed, then you will need to update your site to remove the security hole they are using to inject it into your site.

[final kaoss]

He's talking about this site
http://www.pets-r-great.org/forum/
Search FTW.

[Angel-Wings]

Hmmm - what you write isn't right It's not that 3 sites on your shared server are infected - would be a very strange shared server being located in the US, Switzerland and France at the same time.
When calling your site, sniff the headers and you'll see - there're 3 sites loaded with PHP files which all point to the same location - another site from Russia.

Check the PHP files of your board by downloading them from the official location then comparing them with your files, also check the DB (e.g. Templates) from where these files are called. If and only if there's nothing, check it again and if there's still nothing then and only then Gigapros is the problem.
Just if you write you've been hit with malware, did you setup your board again or just let it be ? Chances are high the problem is somewhere in your files where these calls are stored.

[MarkD793]

Thank you all.

Angel-Wings.... As I obviously have a lot to learn ... Could you give me more details about how to check the PHP and Templates.

Thank you in advance!

[Angel-Wings]

Download all files from trusted sources again, then your files. Create checksums for both (SHA256, RMD160 etc.) - not MD5 and compare what has changed and what you changed

Then make a backup of your database and import it at your test machine going through the templates to search for the URL's being called when opening your site or loading of any external URL's - both inside the PHP files and your Templates.

Some files like the original VB ones call home and some Addons / Template authors do the same when installing their content, quite easy to find these, still the 3 URL's you mention are located somewhere.