how can i resolve a malicious code injection issue

[proudgreenyin]

Hi guys,

I'm a supermod on a forum which appears to have had malicious code injected in the homepage.
every time someone loads the homepage they get a trojan program exploit(i've turned the forums off for now) and kaspersky says it comes comes from inspire-hosting.info.
when i view the page source on the forum , at the very top of the source there is code which is an iframe containing the url for inspire-hosting. this is not our hosting company.

does anyone know how to resolve this problem? thanks in advance guys

proudgreenyin Reviewed by proudgreenyin on 25th Jan 2009. how can i resolve a malicious code injection issue Hi guys, I'm a supermod on a forum which appears to have had malicious code injected in the homepage. every time someone loads the homepage they get a trojan program exploit(i've turned the forums off for now) and kaspersky says it comes comes from inspire-hosting.info. when i view the page source on the forum , at the very top of the source there is code which is an iframe containing the url for inspire-hosting. this is not our hosting company. does anyone know how to resolve this Rating: 5

[ants07]

The Exploit is called Exploit.JS.CVE-2005-1790.k

[proudgreenyin]

also our own hosting company have told us just to stay away from the inspire-hosting site but none of us have gone near it and we're all getting the trojan

[silent assassin]

just edit the index.php and take out the bad code, thats if its only on the homepage

[proudgreenyin]

just edit the index.php and take out the bad code, thats if its only on the homepage

wicked m8, just like that. thanks very much

[ants07]

just edit the index.php and take out the bad code, thats if its only on the homepage

Thanks a lot for the info m8 appreciate it .

[Luke]

just edit the index.php and take out the bad code, thats if its only on the homepage

CHMOD all files to read only to stop code injection & revert all style teamplates if the problem continues.

[ants07]

Problem sorted , cheers for the info guys , can one off the staff close this thread please, cheers.