Black Hole Exploit Kit

[Greenmind]

Hi. Any help?

I have had a number of customers calling today saying they are reluctant to use my site because their AVG virus protection throws up a message reporting a 'Black Hole Exploit Kit' detected. It's clearly something that has gotten on to my site but I'm not sure how to remove it.

Anyone with any experience of this?

Thanks.

[Mike Hughes]

if everything on your site comes from actinic then change your passwords, delete everything from the server (including and especially any htaccess files) then do a site refresh in Actinic.

That will remove any nasties and give you a nice clean site again.

Mike

Ps. If you created a .htaccess file yourself then that will need to be reinstated. The chances are you won't have as that is fairly advanced stuff.

[Greenmind]

Thanks Mike. I shall give that a try.

[fergusw]

Bradley,
we have some more info on this type of malicious code attack here
http://www.teclan.com/blog/latest/malicious-code-attack-on-your-website/

[Greenmind]

That's exactly the kind of thing I was Googling for and couldn't find prior to opening this thread. Thanks.

I just did simple refresh late last night till I had a chance to address it properly, and that seems to have fixed it, at least for the time being.

[fergusw]

That's exactly the kind of thing I was Googling for and couldn't find prior to opening this thread. Thanks.

Thanks for letting me know. For my own info, can I ask what you Google'd for, so I can amend the content to be better found on any future searches......thanks.

[Greenmind]

I was more specific 'black hole malware', 'black hole expolit kit removal' etc.