DMS eBlog
The Tech Blog of do-my-site
Viruses and Trojans Do Attack Websites

You could be the cause of a bad supplier relationship between your website programmer and hosting company simply because you or your company fail to update, not upgrade, your antivirus software.
Many users complain about the difficulties that they have with their suppliers but the truth is that it is not always the supplier that is at fault.
Dr. House says “everyone lies” and that phrase should be thought about by anyone who has had problems with technology whether the fault was on the tech side or the customer side.
A recent problem with one of our clients happened because they were infected by a Trojan or malware. Many clients might say that this never happens. I believe that it is better to admit it than to say that the website was hacked, of course it depends on the I.T. awareness of the client.
The difference is that we had our client website back up and running within hours without any poor excuses as to whose fault it is.
How does one learn that their website is transmitting viruses or Trojans or malware?
Your website will be temporarily blacklisted with a warning to visitors.
An email will be sent to your webmaster by Google or Yandex assuming that your website is already in their database.
Do not ignore these emails because it will increase the delay of your website being reinstated to the status of normal.
After analyzing the log files and having the forethought to copy corrupted files from the client area, we found that the website had been infected by a Trojan and not actually hacked.
After the analysis of the files and some questions asked, the truth emerged that the client workstations had been infected with a virus. The infection occurred after a new employee of the client downloaded a p2p file while working.
Note to employees, file sharing can be considered illegal.
That Trojan traversed their network infecting others but the damage caused their website to be marked by Google and Yandex as being unsafe because it was delivering the Trojan to visitors.
Today’s modern websites use content management systems and many of them whether asp or Php based also use JavaScript to assist editors by giving them WYSIWYG technology such as TinyMCE or other similar software functions.
When someone edits a CMS website they expose their website software to infections because of the interaction between the functions and their browser. This is how a Trojan can inject or insert itself into the asp or Php or JavaScript software.
Does this mean that CMS software is unsafe? Not at all, it is the responsibility of those who are authorized using workstations to ensure that the antivirus software is up-to-date and also protects against malware or malicious software.




Comments (0)
There are no comments.
You must first login to post comments.