Yahoo Answers is shutting down on May 4th, 2021 (Eastern Time) and beginning April 20th, 2021 (Eastern Time) the Yahoo Answers website will be in read-only mode. There will be no changes to other Yahoo properties or services, or your Yahoo account. You can find more information about the Yahoo Answers shutdown and how to download your data on this help page.

How does Troj/Thyself-A appear on a site?

A colleague of mine has had the Troj/Thyself-A trojan (aka Trojan-Downloader. JS.Remora.bp) appear on his site twice in the span of six months. I told him to change his FTP password and his content management system's password into new, more complex passwords. Will this prevent this javascript trojan from appearing on the site again, or could it have appeared without some hacker breaking into the site? How does it get onto a web page?

Update:

Excellent answers so far, thanks. He did contact his hosting provider, actually, and he was told that their servers have advanced firewalls up and that it wouldn't be a problem on their end. *shrug* So he turned to me for ideas.

4 Answers

Relevance
  • 1 decade ago
    Favorite Answer

    There are numerous ways to get on a web page. It could be that your friend is uploading it himself because his machine is infected and therefore infecting files.

    1) Stop using FTP and start using SFTP so tha tyour user name and password can't be sniffed

    2) Scan his machine. I'll post directions below.

    3) Have the hosting company change his user name.

    Keep in mind that everyone of these things is either free of charge or open source. The protection that you get from these is top notch. Furthermore, since I'm not recommending products that you have to buy (NONE of these will ever cost you a penny), you know that I'm not affiliated with the company or making money off recommending them, unlike some. The biggest benefit to you is that this also means that the updates are free. Running the software without the updates is the same as not running it at all. (It is precisely this reason that I don't endorse AVAST or AVG. You AVAST and AVG users can boo and hiss all you like. If you're not paying them, you're not getting the most current definitions, which means you're not fully protected. I don't endorse McAfee or Norton/Symantec because it simply shouldn't be possible for your antivirus software to become infected by a virus. That sort of defeats the purpose of having it.)

    First off, let's talk about what your comptuer should be doing in it's "off hours". You should have your computer configured to do some things automatically to maintain it. Just like you have to change the oil in your car now and then, you need to do somethings to your computer on occasion. The good news is that you can have your computer do these things for itself. Here's my regimen. Sunday - Run Disk Clean Up to get rid of all unnecessary files. Monday - Defrag the hard drive. Tuesday - Spybot scans the HDD. Wednesday - Windows Defender scans. Thursday - Ad Aware Scans. Friday - Claim Win Scans. Saturday - Windows Update runs. Just set the time to a time when you know you won't be using the computer and voila, you're patched, scanned, and secure without even having to think about it.

    In addition to anti-virus software, you should also have anti-spyware software. For those of you that think there is one, be-all, end-all spyware solution, let me disabuse you of that notion now. You should use more than one anti-spyware package because there is no one spyware package that will detect everything. Each one of the three that I list below will pick up things that the others miss. The biggest issue that that there is so much spyware and so many new things are being created constantly, that it is virtually impossible for there to be a single comprehensive list of all the spyware in the world, which means that no single company has the corner on it.

    Unlike the anti-spyware software, I do *not* recommend that you run multiple anti-virus software. I recommend that you only run one. I've seen the contents of a couple of hard drives that were inadvertently trashed by running 2 or more AV programs. The one that I'm recommending is ClamWin - an open source project that produces free antivirus software. That means that the engine and the updates are free - gratis - for ever.

    Black Light isn't a antivirus program per se. It detects and cleans some really nasty things called Windows Root Kits as well as some of the more difficult to remove Trojans and other really ugly things. It's the equivalent of a crowbar to get nasty things out of your operating system and it can do some damage. Which is why I list it as the last time on the list.

    When you're done and everything is cleaned up, be sure to go to Windows Update and apply ALL of the patches. Don't just run the "Express" updates. Run "Custom" and pick all of the software that's available to you. It make take several times before you no longer have patches. Once that's done, be sure to turn on your automatic updates. For Windows XP - http://support.microsoft.com/kb/306525. For Vista - http://www.microsoft.com/protect/computer/updates/...

    Make sure that you're not running a cracked version of Windows or other software packages. Software doesn't get cracked for the benefit of humanity. It gets cracked because a hacker somewhere wants you run his software on your computer. He just puts his bad code inside the thing you want to run, be that an OS like Windows or an game or application like Dreamweaver or Photoshop. Once you install the cracked application, you also install what ever Trojan, Key stroke logger, screen viewer, remote control utility, etc. that the hacker included in the cracked software. That means he can use your computer to serve porn and send spam. Or capture your user names and passwords for identity theft.

    1) Spybot Search & Destroy http://www.safer-networking.org/en/index.html

    2) Windows Defender - http://www.microsoft.com/athome/security/spyware/s...

    3) Lavasoft Adware - http://www.lavasoftusa.com/products/ad_aware_free....

    4) Clamwin Antivirus - http://www.clamwin.com/

    5) Fsecure Black Light - http://www.f-secure.com/blacklight/

  • 5 years ago

    I've noticeable a couple of of those questions going via this night. I commencing to wonder whether Norton has mucked up and further fb to it is blocked lists via default. It might be valued at seeking to replace Norton manually - open the safeguard centre (or anything it is known as) and replace from there. Loads of humans look to be complaining on Norton's possess discussion board, so optimistically they're going to proper it instantly, or no less than within the subsequent 24 hours.

  • Anonymous
    1 decade ago

    you should contact the web hosting provider, they may be in a better position to help you

  • 1 decade ago

    Neo's right becuase different sytems/servers different rules, so get him to call his website hoster, if he dosen't have one and he is hosting it himself tell him to call a technician or any website hosting website.

Still have questions? Get your answers by asking now.