What should I do if the antivirus software alerts and says a virus is detected when visiting my website?

What should I do if antivirus software reports a virus when I visit my website?

If your website has upload or injection vulnerabilities, hackers can easily upload trojans and add virus code to it.

Check your website source code and you will find the virus code is usually:　

〈iframe src=http://***.com/mm.htm width=0 height=0></iframe>

etc. Hackers usually leave a backdoor program in your website, such as the OceanTop ASP trojan, so that they can invade your website again later.

Our Windows virtual hosting provides a virus scanning and removal feature.

Solution steps:
Log in to [Control Center] - [Virtual Hosting] - [Management] - [Virus Scan]. After enabling it, the system can automatically filter trojan programs and virus code. Even if your website has vulnerabilities and is infected with trojans, it will not be affected, because the virus code will be automatically filtered by the system, and visitors will no longer see virus warnings when accessing your website.

In addition, you can use the "Trojan Immunity" function and follow the prompts to remove the virus/trojan online.

To prevent future trojan problems, West.cn provides "Trojan Immunity" and "10 layers of protection measures", which can easily solve website security issues.

Click the "Trojan Immunity" function in the control panel. After enabling it, the system can automatically filter trojan programs and virus code. Even if your website has vulnerabilities and is infected with trojans, it will not be affected, because the virus code will be automatically filtered by the system, and visitors will no longer see virus warnings when accessing your website.

According to the system notification or received email prompt, log in to the virtual hosting control center and configure as needed: directory protection (recommended), file protection (recommended), IP restrictions for important directories such as the backend management /admin/ (recommended), disable website write permission (recommended), and set website scripts (optional). After completing the above steps, you can effectively prevent hackers from planting trojans again.　

For details, please see: http://www.west.cn/services/webhosting/dvbbsset.asp　(Dvbbs forum security settings example)

3. To prevent viruses on your own computer from causing hackers to learn your FTP upload password and other information, we recommend that you change your FTP login password promptly after removing the trojan. Also use as complex a password as possible! (Recommended)

4. Upgrade your website programs, apply relevant security patches, and fix possible security vulnerabilities in your website. If your website uses programs such as Dvbbs or Dongyi SiteBuilder, please upgrade them to the latest version, or seek solutions on the official websites of those programs. If the program was developed by yourself, pay special attention to places with file upload functionality. Programs such as Dvbbs and Dongyi have had vulnerabilities in the upload function before, which allowed hackers to easily invade them. (Recommended)

5. Disabling website write permission can also effectively avoid virus and trojan infections. This can be configured in the read/write permission settings in the virtual hosting management. First, disable write permission for the entire website by clicking "Disable Website Write Permission". Then no one can modify your website source program through the web. Of course, images you upload, new files generated, and the database if it is an Access database will not be able to operate. Don't worry. Next, click "Write Permission Settings for Individual Directories" and set the related directories to be writable, such as the directory where you upload images, your database directory, and the directory where generated files are stored. This can effectively improve the security of your website!