homepage Welcome to WebmasterWorld Guest from 50.16.112.199
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / WebmasterWorld / Webmaster General
Forum Library, Charter, Moderators: phranque

Webmaster General Forum

    
Message from mcafee says my site has a trojan
apparently "JS/Exploit-BO.gen" is the trojan on my websites
groove30

5+ Year Member



 
Msg#: 3108176 posted 2:32 pm on Oct 4, 2006 (gmt 0)

Can anyone help me work out why Mcafee virusScan comes up with a message that its deleted a Trojan whenever I access my site?

It comes up saying that it has deleted something called "JS/Exploit-BO.gen".

Could anyone assist?

 

jtara

WebmasterWorld Senior Member jtara us a WebmasterWorld Top Contributor of All Time 5+ Year Member



 
Msg#: 3108176 posted 3:19 pm on Oct 4, 2006 (gmt 0)

Did you try a search?

groove30

5+ Year Member



 
Msg#: 3108176 posted 3:19 pm on Oct 4, 2006 (gmt 0)

Of webmasterworld? Yes...Couldn't find anything.

Has my site been hacked?

jimbeetle

WebmasterWorld Senior Member jimbeetle us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 3108176 posted 3:37 pm on Oct 4, 2006 (gmt 0)

Has my site been hacked?

Have you checked it?

Tropical Island

WebmasterWorld Senior Member tropical_island us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 3108176 posted 4:26 pm on Oct 4, 2006 (gmt 0)

See [trendmicro.com...]

This will explain it all

kaled

WebmasterWorld Senior Member kaled us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 3108176 posted 4:27 pm on Oct 4, 2006 (gmt 0)

You need to identify the offending file.

I've seen innocent image files produce errors of this sort. If that's the case here, simply resave the image with a tweak or or two.

Kaled.

jtara

WebmasterWorld Senior Member jtara us a WebmasterWorld Top Contributor of All Time 5+ Year Member



 
Msg#: 3108176 posted 5:03 pm on Oct 4, 2006 (gmt 0)

You didn't do a regular Google search?

Just search for the name of the virus. There are dozens of sites discussing it, and at least one ad offering a removal tool.

groove30

5+ Year Member



 
Msg#: 3108176 posted 12:15 pm on Oct 5, 2006 (gmt 0)

There are dozens of sites discussing it yes. But none show me how to get it OFF MY website, only how to remove it from a PC.

My machine isn't infected and if it is that's not the problem. The problem is that the mcafee is detecting the JS/Exploit-BO.gen whenever someone logs on to my site.

This obviously isn't good, I'd like to know if anyone knows how to get it off my site. It seems like my site has been hacked or something, can someone please help?

henry0

WebmasterWorld Senior Member henry0 us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 3108176 posted 12:51 pm on Oct 5, 2006 (gmt 0)

Instead of dealing remotely you might consider d-loading in a new local dir your whole site and perform locally (on your machine) the cleaning.
If you find it, del old files on server and reload the cleaned one

You could try scanning only one dir at a time to isolate the culprit

Next: Cleaning is not enough you need figuring how it happened and if it is reoccurring

jtara

WebmasterWorld Senior Member jtara us a WebmasterWorld Top Contributor of All Time 5+ Year Member



 
Msg#: 3108176 posted 4:02 pm on Oct 5, 2006 (gmt 0)

It appears this may be associated with a particular web hosting company. Do you use the web hosting company mentioned in this article?

[pcworld.com...]

FWIW, I searched for "web site infected with JS/Exploit-BO.gen"

In any case, this should be pretty easy to remove. I assume the message comes up when you access a particular page. Examine the page source, play "which of these things does not belong", and snip it out. At the extreme, simply delete that web page and replace it with a new one built from scratch.

Of course, then you have to figure out how it got there in the first place.

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / WebmasterWorld / Webmaster General
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved