Member Avatar for Khamosh-Saya

Hi alls Web Develpor

I have a Entertainment website (working in process)
one of mine close friend is working on it.
he made a index page for me and now trying to making database.

but when he upload index page it was working fine. but after 6 or 7 days mine site give me virus notification.

i m using Kesparsky Internet security.
after that alot of users tell me that in ur site there is virus
i have talk with mine friend.
he said virus atteck in our script and i cant find it.

is there anyone who will help me?
coz i really need it.
Thanks in Advance

  • 4 Contributors
  • 4 Replies
  • 106 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by Khamosh-Saya

Dani AI

Generated

— a browser warning usually means the site is serving or linking to content that security lists flag as malicious. Follow a quick containment → investigation → clean workflow and avoid editing files in place so you keep a forensic copy.

First, preserve a copy of the site files and logs (download the whole document root and the access/error logs). As pointed toward file tampering, compare your current files to a known-good copy; if you do not have one, start with a file-timestamp and pattern scan (via SSH) to find likely injections:

# files changed in the last 10 days
find /home/youruser/public_html -type f -mtime -10 -print

# search for common PHP obfuscation
grep -R --line-number -I -E "base64_decode|eval\\(|gzinflate|gzuncompress|str_rot13|preg_replace\\(.+\\/e|document\\.write|unescape" /home/youruser/public_html

Also inspect .htaccess and look for unexpected redirects or rewrite rules, and list world-writable files:

grep -R --line-number -i "RewriteRule\\|Redirect\\|RedirectMatch" /home/youruser/public_html
find /home/youruser/public_html -type f -perm -o+w -print

Check server logs for unusual POSTs, odd user-agents, or repeated hits to admin pages, and check scheduled tasks (crons) for unknown entries. If you use FTP, assume credentials may be compromised — rotate FTP/hosting/passwords and switch to SFTP or SSH keys. Scan the development machine that uploads files (malware on a PC can re-infect uploads).

For cleanup, remove injected snippets or restore clean files, then update/reinstall any CMS core, themes and plugins. Tighten file permissions (typically 644 files, 755 directories), remove 777, and consider a professional cleanup or host-assisted restore if the infection is widespread. After cleaning, request a blacklist review from search providers so the browser warning is removed. As and noted, take backups and involve the host if unsure.

Recommended Answers

All 4 Replies

Member Avatar for MidiMagic

Check to see if the uploaded script is the same as the one you wrote.

If it is not the same, someone has hacked the site. Or it may be that the host either modified the script, or added another script.

Other possibilities:

- You are referencing someone else's website that has a virus.

- You have code in your script that is vulnerable to viruses.

- Your script code matches the code of a known virus enough that the virus checker is falsely flagging it.

- The virus is in the computer, not the website.

Member Avatar for daniweb177

database backed up? it's needed very often

Member Avatar for Khamosh-Saya

I have tottly Remove mine Site
after that i have upload Again Something Like Forum..
And 2 pages
In Mozilla Its Warn me that there is virus
and in IE its work fine
see this site
www.friendzpoint.com
No advertise Just for asking

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.