My site keeps getting infected with the Exploit Blackhole Exploit Kit 2195.  It seems to like attacking the initWidget.js and the dnn.js

The company that hosts my site just tells me to change my FTP password, but after a couple of days it finds my new directory and infects my site.

Any suggestions to help me remedy this problem?

Patrick J. Briggs

all variants of the blackhole explout kit attempt to inject obfuscated iframed links of themselves into js files - this is not application specific, it simply searches and updates the first few it finds -this is the mechanism by which it attempts to spread (often known as "drive-by-downloads" as the aim is to infect your sites users and not the site itself).

Blackhole is a constantly evolving toolkit and uses a lot of tangents to install - at present the most succesful ones use recently patched java exploits - the best thing you can do is ensure that your anti-virus scanner is up to date and do a full scan, add another antivirus tool such as malwarebytes to pick up any other missed items, patch known targets such as Adode Flash, Adobe Acrobat and Java, and run windows update. In addition as a best practice I would recommend changing your FTP and user passwords.

 -- My host does indeed use PLESK.  I did change my password to letters, numbers but the infection found the new directory after a couple of days.