A while back we had a problem with a virus breakout on our website. We thought we had eliminated it, but it once again modified some of our most important files, including our [url removed, login to view] page. What it seems to be doing is adding js code to certain files, so far all we know about is our main index file and the index file of a subdomain. We think this came from a security hole in our photo gallery (Coppermine Photo Gallery), so the search will start there.
We need a professional to help diagnose, remove this virus AND prevent it from coming back. NOTE - We do not feel comfortable giving someone we do not know full FTP access to our server. We will create a copy of the main directory we believe the problem resides in and you can search and make the fixes here. The winning bidder must understand that they have to find and fix this issue without ftp access. (Although you will not have full ftp access, you can work in real time with someone who will have ftp access [over gtalk, msn, aim, skype, etc.])
Please see attached pictures for screen shots:
SS1 - User not able to view our homepage
SS2 - Code added to [url removed, login to view] (line 355)
SS3 - Code added to network page (line 198)
SS4 - Virus popup from network page