How do you get rid of a virus that's residing on a website?

Question

I've developed a website that now has a malware/virus. I've downloaded the entire site, removed the virus, removed any miscellaneous files from the root directory including all .php scripts, etc. The virus seems to come back despite my efforts. Any suggestions would be a great help. Thanks in advance.

Answer 1

Restart your PC in safe mode with networking

http://www.pchell.com/support/safemode.s...

Download, install and run a full scan with Malwarebytes

http://www.malwarebytes.org

Run a full scan with Micro Trend House Call

http://housecall.trendmicro.com/

After the scans, restart the PC and update your anti-virus, remember to only have one anti-virus installed on your PC

http://www.avast.com/eng/download-avast-...  [Free, if you do not have one]

Answer 2

When you downloaded the entire website and removed the virus you should have disabled your system restore and the reboted you computer.

Once you have rebooted then you can re-enable your system restore.

Bottom line that virus needs your system restore to re-animate it'self.

hope this helps

Answer 3

I can think of three possibilities...

1. Is your web server running Windows or Linux?  If it's running Windows, then the operator of the web server may need to do a virus check on their system, as it may be coming from the inside.  (I operate a Linux web hosting business, where viruses are less of an issue.)

2. Have you confirmed that the virus isn't actually on your own computer?  Some viruses/malware make themselves look like they're coming from sites you visit, but are actually coming from your own computer.  Free virus scanner: http://housecall.trendmicro.com/

3. If you have PHP on your site, you may have a security hole in your script that a hacker (or worm) is using to re-install itself on your site.   If the script is one that you downloaded online (not one that you wrote), do some google searches to see if the script you are using has updates or known vulnerabiltiies.