As a normal day in the morning when I opened my online account I was surprised to see that there is drastic drop in the traffic. I just recollected my self to see if there is something wrong to my website. I punched my website address I the address bar and the progress bar started then suddenly my anti virus gave me alarm of the Trojan horse infection.

Although this was not new to me, what I did was to downloaded couple of my sites and reverted my server back to the last healthy Backup.

Then I opened the Trojan infected file by pausing the antivirus, I found that there was a iframe src

src = “http://greatbetpoker.cn:8080/index.php”

And some of the files had script src http //a0v.org/x.js code embedded in the iFrame.

Although I just removed them and re uploaded them and my site was ready.

Now I was to think why this happened, I contacted my hosting provider and they just said that either my password was hacked or some of the scripts on my server was allowing the hackers an easy access to my hosting account. I was not convinced as I know that all my sites are just html sites. However the problem is solved but I am looking for the reason why & how this script src http //a0v.org/x.js entered my website.