[Akril]

Hello,


About a week ago, my website, akril.sq7.org, became labeled as a potential attack site by Mozilla Firefox. Upon further investigation, I found that all of my HTML files and JS files had a line of script added to them that redirected the viewer to another site. Naturally, I removed all the code I could find, only to see it reappear the following day.

I contacted the owner of sq7.org, and since none of the other sub-domains under that address besides mine had any similar problems with them, he suggested that I might potentially have a PHP file with outdated code in it, which could have been a weakness in my site's security. As it turns out, I did have such a file on it, and since I had no more need of it, I deleted it, as well as the new code that had appeared in my files by overwriting them.

As I found out the following day, the only thing this changed was the website the script being added was directing viewers to. This time it was to a site that automatically infected the viewer's computer with a Trojan, something I found out the hard way when my computer got briefly infected by visiting my own homepage (despite having Spy Sweeper up and running).

Finally, I did what I should have done in the first place and asked the domain name's owner to change my password, since I didn't see what else could be done. He did this and cleaned up my files for me, and for a while, I was convinced that the crisis was over. However, this morning at around 1:30 AM, my files were changed yet again, with code for yet another website being inserted into my HTML and JS files.

I honestly don't know what else I can do. I've switched from WS_FTP to FileZilla, the most highly recommended FTP program I could find, deleted the PHP file that was apparently the original cause of this problem, and changed passwords*, yet my website is still getting hacked. I've considered switching to another file transfer program, but I'm not sure if that would help at this point, and I haven't been able to locate any that look beginner-friendly.

Is there any advice that anyone here can give me regarding this problem?



*I also tried to scan my computer with MalwareBytes' Anti-Malware, but for some reason, it shuts down just a few seconds after I start a scan, and the same thing happens when I try updating it.

[midders]

Originally Posted by Akril

*I also tried to scan my computer with MalwareBytes' Anti-Malware, but for some reason, it shuts down just a few seconds after I start a scan, and the same thing happens when I try updating it.

This is a good indication that your system is infected; post a HijackThis log in the security forum for help in identifying and cleaning the infection.