Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Trojan-Downloader.JS.Psyme.hz remover

[fadisky]

Hello

can any body help me with the Trojan-Downloader.JS.Psyme.hz remover ???
i can't find an remover for linux server for this trojan ???
thanks

[iand]

maybe this woulda been better in technical help forum?

[Lastbutnotleast]

Same problem with Trojan-Downloader.JS.Psyme.hz

All my websites hosted at OXEO.com have this problem

Do you have any solution ?

I guess I will have to stop working with this hosting company



[ urgent ]

[Lastbutnotleast]

I found this on a forum

What this is is them finding pretty inactive accounts, placing their trojans in their files. They do it because they get paid to. It's probably some kind of adware trojan. I had it happen to me on another host, I won't say their name though.

I can't believe it !!!

[Lastbutnotleast]

All my websites are empty now - Years of work has to be re-uploaded !!!!!!!!!!

Here are the answers of the people of OXEO.com

QUOTE 1

Hello,

The virus warning on the ****.com mainpage should be gone now and we are in the progress of cleaning up all your other pages. It seems your FTP password had been leaked and someone used the FTP account to modify most of your uploaded html files. To prevent further access attempts have updated your account password to: *** / ***

If we can be of further assistance please let us know.


QUOTE 2

Hello,

It seems that almost all or most of your html files had been deleted or modified by the attacker. I would recommend to re-upload the html files and overwrite existing content to make sure that nothing from the attack remains on your pages. Please let us know in case we should restore any content from a backup. If we can be of further assistance please let us know.

Sincerely,

--------------------

And that's it !



Is it a usual hosting practise ???