How to remove iFrame Virus from your Website
November 3rd, 2009
Getting bugged with the iframe virus which is affecting your website? You tried removing it many times but it just keeps coming back… well the problem is not with your hosting company but with your computer.
The problem is that your login information has been compromised by a password stealing virus which has infected a computer that is used to manage your cPanel account and it has not been detected / removed by the antivirus software that is running on that computer. This issue is very common as the malware that is doing this is constantly being revised and is also polymorphic so each time it runs, it is slightly different as well.
These injections are actually being placed with in the files through ftp access to the account using a bot net. It is recommended the use of malwarebytes.com as well as combofix.org which has been proven in our experience to remove these types of infections from personal computers.
Once you have done this and have confirmed that all computers that access this account have been cleaned you will want to update the all passwords for this account including ftp accounts for it to be more secure and prevent further injections.
