<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Site virus</title>
	<atom:link href="http://openmoonproject.com/leaving-earth/site-virus/feed/" rel="self" type="application/rss+xml" />
	<link>http://openmoonproject.com/leaving-earth/site-virus/</link>
	<description>Open Moon Project - Open Ideas - Open Achievements</description>
	<lastBuildDate>Thu, 29 Jul 2010 12:54:23 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>By: Konstantin</title>
		<link>http://openmoonproject.com/leaving-earth/site-virus/comment-page-1/#comment-187</link>
		<dc:creator>Konstantin</dc:creator>
		<pubDate>Sat, 12 Dec 2009 11:41:13 +0000</pubDate>
		<guid isPermaLink="false">http://openmoonproject.com/?p=128#comment-187</guid>
		<description>Yes, I just meant that not ALL of the PHP/HTML/ASP files are infected. JS files are infected completely though</description>
		<content:encoded><![CDATA[<p>Yes, I just meant that not ALL of the PHP/HTML/ASP files are infected. JS files are infected completely though</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: admin</title>
		<link>http://openmoonproject.com/leaving-earth/site-virus/comment-page-1/#comment-178</link>
		<dc:creator>admin</dc:creator>
		<pubDate>Fri, 11 Dec 2009 14:47:13 +0000</pubDate>
		<guid isPermaLink="false">http://openmoonproject.com/?p=128#comment-178</guid>
		<description>Well thanks for that 
it certainly affects js files
so beware to remove it from them also</description>
		<content:encoded><![CDATA[<p>Well thanks for that<br />
it certainly affects js files<br />
so beware to remove it from them also</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Konstantin</title>
		<link>http://openmoonproject.com/leaving-earth/site-virus/comment-page-1/#comment-175</link>
		<dc:creator>Konstantin</dc:creator>
		<pubDate>Fri, 11 Dec 2009 11:32:26 +0000</pubDate>
		<guid isPermaLink="false">http://openmoonproject.com/?p=128#comment-175</guid>
		<description>I also faced with this virus and wrote a script for cleaning the infected files. You should just place it into the web root and make sure that the script has enough permissions for updating files. Please feel free to download the script at

http://justcoded.com/wp-content/uploads/2009/12/curevir.php.txt

Btw, you are not completely correct about virus behaviour. It doesn&#039;t infect any PHP/HTML/ASP file, only specific files which contain words &quot;index&quot;, &quot;default&quot;, &quot;main&quot;, maybe something else</description>
		<content:encoded><![CDATA[<p>I also faced with this virus and wrote a script for cleaning the infected files. You should just place it into the web root and make sure that the script has enough permissions for updating files. Please feel free to download the script at</p>
<p><a href="http://justcoded.com/wp-content/uploads/2009/12/curevir.php.txt" rel="nofollow">http://justcoded.com/wp-content/uploads/2009/12/curevir.php.txt</a></p>
<p>Btw, you are not completely correct about virus behaviour. It doesn&#8217;t infect any PHP/HTML/ASP file, only specific files which contain words &#8220;index&#8221;, &#8220;default&#8221;, &#8220;main&#8221;, maybe something else</p>
]]></content:encoded>
	</item>
</channel>
</rss>
