The image is a snapshot of the source code from my website kalsereousz.co.uk.
I have no idea where that vb script came from, or where the exe file it calls is, but this is very serious. That script calls a trojan dropper which is malicious software that will download all sorts of programs to your computer. What happens after that? God knows, the point is someone has gained access to your machine.
I was lucky enough to be experimenting with some new anti-virus software and running a scan after a new install. The scan picked up the problem and quarantined my website file which I recently downloaded from the server that hosts my site. I thought I might as well check the online copy on the server, just incase its not a simple local virus I might have got from a usb stick or something. Boy was that a good idea.
The new Antivirus software I trialed was Kaspersky Pure 2.0. I've used other Kaspersky products before and Pure is a typically solid piece of software. Easy to use, full of advanced functions and very very good. It has a 'safe run' mode that allowed me to visit the site and not be in danger of downloading a virus. Before the page loaded, a pop up notified me the website has a trojan downloader. Cracking stuff if you want to trial out a potential dodgy website.
Well I'm off to edit this source code and try to save my site. If you're looking for an anti-virus, Kaspersky will have you well protected. Stay strapped love birds.
No comments:
Post a Comment