Posted 1 month ago #
i have 2 blogs in ixwebhosting.com shared servers. those 2 blogs are recently attacking by a strange script ,which automatically added before </body> in every file. and prompt users to download a virus.
Please help me. i tried all things like changing ftp password,updating wordpress.... nothing works...is there any problem from host side?
Posted 1 month ago #
if you are the only person who has access to the blogs, then the uploader is on your computer. What it is doing is automatically altering your files locally, and using your FTP client to update the files w/o you doing anything. So changing the ftp password doesnt work because the next time you log in to ftp, it just re-records the new password.
Get yourself a good antivirus and scan locally.
My boss had the same issue and all his websites got the same kind of bug.
Posted 1 month ago #
i have latest bitdefender antivirus working perfectly, i have so many sites in many hosts. But getting affect only for these 2 blogs. Remaining sites are working fine in other hosts.
Posted 1 month ago #
Posted 1 month ago #
ofcourse, i have cleaned it completely 4 times till now., but it was attacking again and again.,,
Posted 1 month ago #
Tell your web host; the attack might be coming from shared hosting.
Posted 1 month ago #
i just sent a support ticket,waiting for replay. may i know any one here got this script attack before closing body tag </body>
Posted 1 month ago #
What script is it? By any chance does it involved iframes and links to unknown sites?
ixwebhosting.com is a crap host. move.
they have a history around here,
Posted 1 month ago #
@thetanooki
it is a script which added automatically before </body> tag in every file contains that closing body tag.
UPDATE : they replied to my mail. they said my system has virus and it is affecting it. but fact is my system is virus free. once again i am telling i have so many accounts in other hosts. why they are not affected. and why this account only getting repeated attention.
i asked them these questions. waiting for their reply
Posted 1 month ago #
It looks like your host has the security problem; read whooami's link above.
You must log in to post.
