Infected with Trojan.JS.Redirector.qb

[goodboy88]

Hi my web store had been infected with Trojan.JS.Redirector.qb show up by Kaspersky. In the Kaspersky report it shows the object are:

http://vipaquarium.ka.hn/showthread.php?t=86311450//showthread

http://erabaglanti.ka.hn/showthread.php?t=86311450//showthread

 

 

Symptom:

1) Categories not show when browse into individual product.

2) Under the individual product, the picture isn't display correctly when click on it. Example when click on it, it display only the picture instead of pop up a small window to display the picture bigger.

 

 

How to delete this Trojan? Which is the file is infected? For your info i'm using 1.4.3.

[indus]

Hi my web store had been infected with Trojan.JS.Redirector.qb show up by Kaspersky. In the Kaspersky report it shows the object are:

http://vipaquarium.ka.hn/showthread.php?t=86311450//showthread

http://erabaglanti.ka.hn/showthread.php?t=86311450//showthread

 

 

Symptom:

1) Categories not show when browse into individual product.

2) Under the individual product, the picture isn't display correctly when click on it. Example when click on it, it display only the picture instead of pop up a small window to display the picture bigger.

 

 

How to delete this Trojan? Which is the file is infected? For your info i'm using 1.4.3.

 

 

http://www.prestashop.com/forums/topic/125798-footertpl-vulnerability/

 

Many users have the problem.Delete the strange php files in upload and download folder if you see any other than index.php.

 

Check your themes/footer.tpl for any javascript at the bottom and delete it.

 

And only after you have done the above,Change admin password of back office,employee passwords and database passwords.

[x3n0m0rph]

I have the exact same problem. It started today, around 10:00. My website is offline for desinfection now..

 

I think there is a prestashop vulnerability.

 

Can we have any help from the Prestashop team?

Any details about this trojan?

 

Thx.

[indus]

I have the exact same problem. It started today, around 10:00. My website is offline for desinfection now..

 

I think there is a prestashop vulnerability.

 

Can we have any help from the Prestashop team?

Any details about this trojan?

 

Thx.

 

Please follow that link in my previous post.The developers seem to have found the problem and the solution and they will announce it soon.They are also actively posting in that thread when it was first reported.