Trojan-Downloader.JS.Twetti.a infection
 

On a vB 3.8.4 PL2 site (www.inspector.ws) that I assist the admin on, the file vbulletin_cphome_scripts.js was replace with a virus infected version and permissions were changed. To fix it, I simply uploaded a virgin copy of the file via FTP.


1/22/2010 7:33:29 PM http://inspector.ws/clientscript/vbu...ome_scripts.js Firefox Denied: Trojan-Downloader.JS.Twetti.a
1/22/2010 7:33:29 PM http://inspector.ws/clientscript/vbu...ome_scripts.js Firefox Detected: Trojan-Downloader.JS.Twetti.a


1- Does anyone know how this file was replaced and the permissions changed? I am the only one with access to the files on the server.

2- Does anyone have any suggestions on keeping it from happening again?

Thanks in advance!

Tony