My client has a simple ASP web site which needs to be cleaned from virus/harmful scripts etc.
I am not sure about what has been infected.
1. I will give you the live site address first (to serious/reliable bidders),
2. You'll have a look then turn back to me with your bid.
3. I will upload all the contents to you
4. You will clean and send them back to me
I think it may be a java script virus or sth.
I request;
- Cleaning this harmfull scripts
- Tell me where they were
- Tell me what I can do to prevent from this in the future
This site is in Turkish, but I don't think that will be a problem. If you need translation, you can ask me and I'll translate them instantly through Google Talk or MSN while you work on it.
## Deliverables
This may be a clue about the infection (if I am not wrong);
When I first opened the site (homepage + admin panel) with my Firefox browser there was a long disk activity.
The I rebooted my PC and noticed that there was a file in my startup : "rncsys32"
I cleaned and deleted it but some of my network functions were broken, like reaching to shared folders in my LAN.