How did my website get a virus?

I only update it through a form thing that allows me to write text and upload pictures - I don't go directly into the FTP. Some how, somewhere along the line I have this js/psyme trojan thing. So:

How did it get there? (Unsecure server?)
How do I get rid of it?

extremity2008-01-11T03:07:51Z

Favorite Answer

Add a password to access your upload script. the js/psyme might either be a java script that has mischievous intent or just a cracking attempt at your website, or it might be (a rare instance of) an error condition in one of your java script file (hence teh folder might be named js) and need to be debugged and rectified. So login int your account and try figuring it out. (as for the insecure part, if any thing is insecure it might be your upload script, so check for assumptions like does the script allow the file name to contain specialcharacters like "." or "/" does it automatically save an uploaded script with a predetermined extension or can you choose it)

?2016-08-26T01:08:38Z

2

Anonymous2008-01-11T04:20:13Z

It's probably an insecure server. It might be either a hacker or a virus. Make your server more secure with a firewall like the guys above me said, heh maybe anti-virus software for servers?!

Anonymous2008-01-11T02:49:37Z

I think it's not a virus. It's hacking. Make your website more secure by adding a better firewall.

?2008-01-11T02:52:39Z

Check that it has been not added by the hosting site itself:
- use an other computer
- add a simple html page through FTP and check that if it contains such js
- edit the source code of the page where you have found the js, remove such js, upload the updated page to the site through FTP
- if one or both tests give again such js, change hosting
-- otherwise check your computer

Show more answers (1)