virus on server adding malacious code on pages

A while back we had a problem with a virus breakout on our website. We thought we had eliminated it, but it once again modified some of our most important files, including our [url removed, login to view] page. What it seems to be doing is adding js code to certain files, so far all we know about is our main index file and the index file of a subdomain. We think this came from a security hole in our photo gallery (Coppermine Photo Gallery), so the search will start there.

As far as we know, this has effected us in 2 locations, although there may be more we do not know about. First, '[url removed, login to view]' (from www/[url removed, login to view]) and 'language="javascript">$=' (from www/poker-network/[url removed, login to view]). It looks like the code was manually added but perhaps one of our many JS files or something else have been corrupted?

We need a professional to help diagnose, remove this virus AND prevent it from coming back. NOTE - We do not feel comfortable giving someone we do not know full FTP access to our server. We will create a copy of the main directory we believe the problem resides in and you can search and make the fixes here. The winning bidder must understand that they have to find and fix this issue without ftp access. (Although you will not have full ftp access, you can work in real time with someone who will have ftp access [over gtalk, msn, aim, skype, etc.])

Please see attached pictures for screen shots:

SS1 - User not able to view our homepage

SS2 - Code added to [url removed, login to view] (line 355)

SS3 - Code added to network page (line 198)

SS4 - Virus popup from network page

Taidot: Verkkoturva

Näytä lisää: coppermine photo gallery virus, php motion, search in code, photo gallery html code, our code, make msn homepage, first code, find work on line, find on-line, find code, find and search in php code, find a code professional, code search, code on time, code line, bh photo, virus server, skype on line, server code, adding time, virus, virus remove, trojan, so many pages, server security

Tietoa työnantajasta:
( 34 arvostelua ) Ishpeming, United States

Projektin tunnus: #473656

6 freelanceria on tarjonnut keskimäärin 281 $ tähän työhön


Hi, I am ready to start. Please check my profile for references and Your PM for more details. Thank You.

100 $ USD 2 päivässä
(20 arvostelua)

Certified Ethical Hacker, can help.

150 $ USD 0 päivässä
(26 arvostelua)

Hi Good Day, Web hacker Bid. Expert in Script injection protection (XSS). Please check PM and my reviews. Regards [url removed, login to view] B.E

200 $ USD 0 päivässä
(22 arvostelua)

can help you. tnx.

50 $ USD 1 päivässä
(22 arvostelua)

Hi.. Am Expert in web security.. Please check PM..

175 $ USD 2 päivässä
(9 arvostelua)

I have already encountered the virus and have the experience of its removal. There are nuances that I sent in the PM.

60 $ USD 1 päivässä
(0 arvostelua)

The problem seems to lead deeper than just to the html files. Please see PM.

1000 $ USD 5 päivässä
(0 arvostelua)