somebody please help me about the virus in my site!!!

[thecivexpert]

Please can somebody tell me how i can remove the virus. i didn't have a clue about it. i did not do it intentionally. i hope i do not get banned from this post. please somebody help me. i am very sorry about all this. please help me!!!

 

[Knight-Dragon]

Moved to Computers... where all the experts are...

 

[CrackedCrystal]

You need to be a little more specific. Where is this file? What virus do you have? Do you have a virus checker? How did you find out you had the virus? Is the virus widespread?

 

[Grille]

That virus is probably "VBS/Redlof".
Some info.
Getting rid of it from a windows system might be comparably "easy".
However, I got absolutely no idea how to repair the web site (the infected files), since I'm the opposite of an expert.

I would wildly guess that you have to inspect the source code of all potentially infected files (see link, it's *.html files and whatnot) and delete the stuff that shouldn't be there, while running a linux or unix system since they are not affected.

 

[CrackedCrystal]

http://securityresponse.symantec.com/avcenter/venc/data/html.redlof.a.html

there is another site for you.

 

[Chieftess]

Read the pm I sent you. I viewed your site in Unix. Also, email geocities's tech support about it.

 

[thecivexpert]

k thankz. but i am still confused. somebody help me...and be a little more specific PLEASE!

 

[CornMaster]

Originally posted by thecivexpert
k thankz. but i am still confused. somebody help me...and be a little more specific PLEASE!

You need to be more specific about what you are confused about. We can't read minds.

 

[Grille]

Here's two shots I took from your web site's source code.

This is *probably* the line where the problem starts:

I suspect the following to be the viral script stuff:

As said, I'm wouldn't exactly know how to deal with it (other than killing suspicious lines in a linux/unix based html editor or trashing all the *.htm(l) files).

You should follow Chieftess' advice and contact the technical administration of that web site for professionel help.

Also, you must make sure that the virus does not sit on your machine (read the linked sites above).
Maybe you create an empty "test.txt" file (or for the record: of known size) and rename it to "test.html". Re-boot your comp and see if the file size got bigger. If it's bigger, you certainly have that virus on your computer (again, see links how to cure your system).