SOLUTION for Gumblar/IFRAME/JS hacks with stolen FTP Passwords...

[Voltio]

I guess its not working. I just uploaded a .txt file with that code without a problem.

 

[noimad1]

I guess its not working. I just uploaded a .txt file with that code without a problem.

Make sure in the ftp_clamscan_config.php file that you have the path to clamscan set correctly. I noticed that was my problem when I first installed.

The default was set to:

/usr/bin/clamscan

But in all of my installations it was set to:

/usr/local/bin/clamscan

a simple "locate clamscan" should give you your location.

Then be sure to restart pure-ftp of course.

 

[noimad1]

I guess its not working. I just uploaded a .txt file with that code without a problem.

Oh yea, and if you have csf installed be sure to disable it before you test it so you don't block yourself from the server.....

 

[Voltio]

Mine is correct, but I notice this on the logs:

2010.06.17 22:04:23 --- init... File : /home/username/public_html/test.txt
2010.06.17 22:04:23 --- wordscan : NOT FOUND.
2010.06.17 22:04:23 --- end...


o.o! any clue?

Thanks for your assistance.