Msg#: 3108176 posted 12:51 pm on Oct 5, 2006 (gmt 0)
Instead of dealing remotely you might consider d-loading in a new local dir your whole site and perform locally (on your machine) the cleaning. If you find it, del old files on server and reload the cleaned one
You could try scanning only one dir at a time to isolate the culprit
Next: Cleaning is not enough you need figuring how it happened and if it is reoccurring
FWIW, I searched for "web site infected with JS/Exploit-BO.gen"
In any case, this should be pretty easy to remove. I assume the message comes up when you access a particular page. Examine the page source, play "which of these things does not belong", and snip it out. At the extreme, simply delete that web page and replace it with a new one built from scratch.
Of course, then you have to figure out how it got there in the first place.