Hi,
Thanks for your reply.
This will be difficult – its not my website, i work for the hosting company who host this site. Dare i say a shed load of people in this company have FTP’d into this site aswell as our customer.
Having a lot of fun with these “hacked” websites. I have been tasked to resolve issues like this and get the site live, I have little experience with HTML and PHP etc, so locating Java and iframes is not as straightforward for me, Thus me finding this website for a bit of help :)
Is there any program you would reccomend for this scan? I have AVG already and it is not showing any issues.
What I’d suggest is designate two people to have FTP access, such as the customer and you. Both should do thorough scans. Then change the FTP password and for now don’t give it to anyone until they’ve done scans, too.
Everyone else who’s had FTP access should eventually do scans because a gumblar-infected PC will infect every website it logs into.
This page shows what malicious iframes and JavaScript look like, and discusses other issues you’re likely to encounter:
http://25yearsofprogramming.com/blog/20071223.htm
This page has, among other information that you might find useful, a list of links to online virus scanners:
http://25yearsofprogramming.com/blog/20070705.htm
With the evidence of infection so high, I’d recommend scanning with at least two different ones.
