Downloader trojan

[warbird]

Users are getting a trojan warning from my site. I have looked in the usual places such as the index.php files and images directories (running oscommerce) and I don't see anything out of the ordinary. Are there any antivirus programs that can scan web servers for these problems?

[Swipetek]

What OS are you using?

[warbird]

The OS I am using has nothing to do with the server vulnerabilities I keep seeing with Hostrocket. i found that EVERY index.html and index.php had this trojan code inserted! These trojan snippets were not in any of the backup files I had saved so they were not uploaded by me.

[Swipetek]

Do you run any third party scripts?

[warbird]

Nope. oscommerce and Jalbum are the only non-html stuff I am running. all of the html files are made by me.

[Swipetek]

Hmm, I use osCommerce but have never had any problems. I have never used Jalbum though so I don't know if there are any vulnerabilities or flaws within it, have you looked it up? Also, are you using the newest version of osCommerce?

[warbird]

Hmm, I use osCommerce but have never had any problems. I have never used Jalbum though so I don't know if there are any vulnerabilities or flaws within it, have you looked it up? Also, are you using the newest version of osCommerce?

Jalbum is fine. No reports for them.

I am using the latest version of oscommerce.

If you check around on here you will see that Hostrocket has veen hit with this kind of thig for the last couple of years. It seems to be a cpanel vulnerability because it hits people running nothing but a "hello" page.

[Swipetek]

Oh ok, well Im lost then, have you tried to contact hostrocket?

[princefan]

Rework your script, change something, quick? that's terrible for your site.

[shamulel]

hello friend
me to suffer a lot by trojan virus
but i used kaspersky anti virus
it will delete that virus
_____________________________
Mortgage Introducers (http://www.themortgagebroker.co.uk/introducers.html) vegetarian chili (http://www.veggie123.com)