There was some code echoing an iframe and loading content from http://goooogleadsence.biz/

The code was inserted into

The iframe html code was then appearing before the DocType on the site.

Ryan

Right, i was just typing the same thing!

Hi,

This virus is not related to the host, but its related to client side malware.

This can be detected through Avast (try free version and it works well). This malware gets the ftp details from the session, connects the site you last connected through ftp, downloads index.* (index.html, index.htm, index.php, index.aspx etc), inserts the iframe code and finally uploads back to the server.

This malware can be detected by avas and your system will be free from that, but it doesnt cure the files on the server.

To cure files on the server, I am trying to write a script from past few days and seems its going to work fine, just fine-tuning the script as of now and will be releasing it soon.

The script is written in php file, so if you have php support on your server, this script is going to fix your problems.

You can check back at www.yourjoomlapro.com for the release.

Regards,

Dave.

Hi,

The fix for the same is here:

http://www.yourjoomlapro.com/

This would help to fix the errors on the files corrupted on the server. Though, the malware on your computer or any of your client's computer needs to be fixed. It must be on any of the computer.

May be, checking the ftp log and ip would help you to trace the cause.

Regards,

Dave.