A few weeks ago I hired an outsourcer from India to build for me a very simple PHP site. I bought PHP hosting and a domain name, and I gave him all the credentials together with the specification of his tasks.
When the deadline was over (it was a really simple task), I contacted him to see some results and he asked me for more time. Finally, I realised that he was not able to do the task, so I told him that I din't need his services anymore.
Today I accessed the site's main page just to look if I could use some of what he did, but my antivirus blocked me (See the image below).
So in there there is some virus called VBS:Agent-KZ[Trj].
I contacted my hosting provider and they told me that they did not detect anything.
My questions are:
- Do you think this guy did something with the goal of harming me?
- How can this virus harm me?, How dangerous it is?
- I am concern about my email password, because i was logged in my Gmail account in a different tab while I tried to access the site. Should I change my password?
I would appreciate your advice on my problem. Have a look at the image below to see the antivirus warning.
I am struggling with this issue, so far this is what i did:
1- I did contact the company, but they keep saying to me they find nothing in my documents root. I am sceptic about this, because since it is a shared hosting i think the virus could be anywhere.
2- I dissabled the DNS server configuration from my www.godaddy.com admin panel, so if somebody goes to that URL, he she will not be infected.
3- I Scanned the hold infected system with AVAST and i found this: A file called f3PSSavr.src in the System32 file. I managed to erase it and currently i am performing a boot time scan also with AVAST. I am curious what that was? And how it came there? I scan my systems for viruses at least once per month and this is new. You think it could come via the infected URL?
4- My next step once the boot scan in my laptop finishes is to erase all the browsers cache.
So what do you think you think i am going in the correct way to fix this?