How to scan if my website is under virus attack or has been infected?

[Iris]

First don't do it in your browser, or at least disable JavaScript and Flash.

 

You can start with Google's Safe Browsing Diagnostics: http://www.google.com/safebrowsing/diagnos...www.example.com (replace www.example.com with your own site address). It will show whether Google found anything suspicious on your site.

 

Then you can analyze HTML/script code of your files on server. They should not contain anything that you didn't put there.

 

Then scan your server for any suspicious/new files and directories.

 

Then look through web server configuration. There could be unwanted redirects and error pages.

 

You might also want to take a look at my online tool called Unmask Parasites http://www.UnmaskParasites.com . It analyzes HTTP response and HTML code of web pages and highlights suspicious code (links, scripts, iframes and redirects). Google's Safe Browsing information is also included in Unmask Parasites results. Note, that the tool is still in beta and may not detect every security problem.

[Viper3773]

i think this is very interesting.

 

Thank you

[ThornKRT]

very nice iris

[frank white]

yep, thanks

[wivo]

Thanks for this

[Michael John]

Thanks for the info, very helpful.

[terabyte]

Lately there is a malicious script that adds a lot of files named with numbers and .htaccess files to call them.

[Iris]

i had recently a link to another website, there was a malicious code in there script trying to install an exploit in every visitors browser.

i couldnt find the prob and found this helptool, since it helped me to find the culprit, i posted it here as well.

better be safe then sorry, and this way you could scan your site from time to time to see if all is clear.