• Registered: 2022-03-22
  • Posts: 29

Topic: Cleaning Files On Website.

I have been notified by my host that they have found infected files on my site and have consequently suspended it. I do not know how to clean these files. Is anyone able to assist please. Here is the scan report blow.

/home2/bkvpspor/public_html/vidiprinter.html: SL-PHP-INJECTOR-1-gdz.UNOFFICIAL FOUND
/home2/bkvpspor/public_html/index.html: SL-PHP-INJECTOR-1-gdz.UNOFFICIAL FOUND

----------- SCAN SUMMARY -----------
Known viruses: 2206551
Engine version: devel-clamav-0.99-beta1-632-g8a582c7
Scanned directories: 84
Scanned files: 2486
Infected files: 2
Data scanned: 68.12 MB
Data read: 1386.48 MB (ratio 0.05:1)
Time: 25.219 sec (0 m 25 s)


----------- SCAN SUMMARY -----------
Known viruses: 2206551
Engine version: devel-clamav-0.99-beta1-632-g8a582c7
Scanned directories: 0
Scanned files: 0
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 6.443 sec (0 m 6 s)


----------- SCAN SUMMARY -----------
Known viruses: 2206551
Engine version: devel-clamav-0.99-beta1-632-g8a582c7
Scanned directories: 0
Scanned files: 0
Infected files: 0
Data scanned: 0.00 MB
Data read: 0.00 MB (ratio 0.00:1)
Time: 6.416 sec (0 m 6 s)

  • tomH
  • tomH
  • Member
  • Offline
  • Registered: 2022-01-21
  • Posts: 81

Re: Cleaning Files On Website.

A Google search for website security check & malware scanner returns several sites. I'm sure money is involved once something is found that needs to be cleaned.

First though, do you have a backup that predates the infected site? If so, try uploading that and then run one of the checks.

https://sitecheck.sucuri.net/

https://www.sitelock.com/free-website-scan/

https://geekflare.com/online-scan-websi … abilities/

https://www.getastra.com/scanner/malware-scanner

3 Reply by Bob Keen (edited by Bob Keen 2022-11-08 12:02:18)

  • Registered: 2022-03-22
  • Posts: 29

Re: Cleaning Files On Website.

I am unable to upload anything as the host has suspended the site. They are supposed to be contacting me to explain how to clean the infected files but as they are in America, they are taking their time about it, which is why I was hoping that I could clean the files and then let them know it had been done.

I am unable to access the website since it has been suspended by the host.

I don't require another scan as the infected files are identified already. It is how to clean them that is my problem.

  • Alfred
  • Alfred
  • Administrator
  • Offline
  • Registered: 2022-01-21
  • Posts: 1,333

Re: Cleaning Files On Website.

Bob Keen wrote:

I am unable to upload anything as the host has suspended the site.

Suspending the site should only mean that you can’t visit it via a browser. Are you saying you can’t access the files on the hosting server via ‘Maintain Website’ within WebPlus or via your hosting control panel (cPanel, or Plesk, or whatever)? How are you supposed to replace the infected files if you can’t upload new ones??

"Has it ever struck you that life is all memory, except for the one present moment that goes by you so quick you hardly catch it going?"
― Tennessee Williams

5 Reply by Bob Keen (edited by Bob Keen 2022-11-09 07:17:13)

  • Registered: 2022-03-22
  • Posts: 29

Re: Cleaning Files On Website.

Hi Alfred
I have now been able to connect via Maintain Site. The issue was with my password which was incorrect. What can I now do in regard to cleaning the infected files which I believe are Vidiprinter and index? Do I simply delete them from the server and then upload them again from my computer as an incremental update?

I have run a full scan for viruses on my computer with nothing having been detected regarding the two files above.

6 Reply by Bob Keen (edited by Bob Keen 2022-11-09 13:21:41)

  • Registered: 2022-03-22
  • Posts: 29

Re: Cleaning Files On Website.

I decided to risk it. I deleted the files from the Maintain Website section and uploaded the ones that have been stored on my computer since they were first created, having firstly run a full scan of my computer, which did not reveal any problems. However, the new scan report is still showing the files are infected. I am not sure what to do now.

I have found some code that is common to both pages (a number viewing indicator) and have removed it from each page. I have uploaded the pages again and am now waiting for the host (they have a very slow chat) to do another scan at their end.

UPDATE
Those were the infected files and the website is now back up again. Proved relatively simple in the end.

  • Alfred
  • Alfred
  • Administrator
  • Offline
  • Registered: 2022-01-21
  • Posts: 1,333

Re: Cleaning Files On Website.

Good news, Bob! Thanks for the update.

"Has it ever struck you that life is all memory, except for the one present moment that goes by you so quick you hardly catch it going?"
― Tennessee Williams