WordPress.org

Ready to get started?Download WordPress

Forums

oQey Gallery
[resolved] Oqey & malware (9 posts)

  1. Lauravl
    Member
    Posted 2 years ago #

    A couple of weeks ago I installed Oqey on my WP-websites http://www.fotovanjouwhuisdier.nl en http://www.fotovanjouwbruiloft.nl en http://www.perfectportret.nl. I love to work with it!

    But... à couple of weeks ago I client told my about he was being attacked when he opened http://www.perfectportret.nl. First I thought his virusscanner was too sensitive. But today a customer of http://www.fotovanjouwhuisdier.nl complained about a Trojan Horse-popup.

    After a long search I found infected .js-files with var08 and a lot of numbers and / /. I deleten them yet from fotovanjouwhuisdier.nl and will do the same on the other websites. But I googled also and it seems Oqey is the plugin that's 'responsible' for it.

    Is there a Solutions? Orherwise I have to remove it at all.

    http://wordpress.org/extend/plugins/oqey-gallery/

  2. Lauravl
    Member
    Posted 2 years ago #

    And i have the newest version

  3. oQeySites
    Member
    Plugin Author

    Posted 2 years ago #

    Dear Laura,

    please change your passwords, use strong FTP passwords and for wp-admin use strong passwords.
    (http://www.pctools.com/guides/password/?length=16&phonetic=on&alpha=on&mixedcase=on&numeric=on&nosimilar=on&quantity=1&generate=true#password_generator)

    Scan your computer for viruses, for backdoors etc... please use a licenced antivirus.
    If you use a mac don't worry, there is no viruses. :)

    oQey Gallery is safe and secured. We take care of it every day, and if you really like our plugin, you can support us with a donation.

    Cheers.

  4. Lauravl
    Member
    Posted 2 years ago #

    I have a Mac and indeed do not have viruses. That's also not my concern. I'm concerned about the popups my costumers get from for example Avast which is telling about a Trojan Horse.

    And it is since I have Oqey. Didn't had any other new plugins or something else new. I had to turn off the safe mode of my domain because Oqey wouldn't work with the safe mode on. I put it on (because of safety this morning) and the gallery's still work. Maybe it is safer at this way.

    I have to clean all my files this evening (after my other work). Do you know where I can do a checkup after that to see if it's really gone?

  5. oQeySites
    Member
    Plugin Author

    Posted 2 years ago #

    Laura, the plugin itself cannot cause the issue you're experiencing. It is verified constantly and every time when we get any kind of security holes reports, we'd check it again, even if the report was fake. When required, we are releasing updates. Issues that you're getting on Internet Explorer might be caused by some java used with your theme. However, if you believe so strong that your customers are getting popups because you are using our product, you are free to remove it and use any other you feel comfortable with.
    Thank you.

  6. Lauravl
    Member
    Posted 2 years ago #

    I'm not sure of everything right now ;)

    I installed it on 6th december and at the 8th I was infected (which I know right know because of the date of the infected files). Is it possible because of the safe mode I switched off?

    But: what doesn't work with the safe mode on? I turned it on this morning and it looks like it still works http://www.perfectportret.nl/2011/12/18/zo-leuk-was-2011-nieuws/

    Although: the popup is in all the browsers (IE, mozilla, chrome)

  7. Lauravl
    Member
    Posted 2 years ago #

    (and right now my hostingcompany has some issues, at al his websites, so if you can't reach the URL....)

  8. oQeySites
    Member
    Plugin Author

    Posted 2 years ago #

    Safe mode on/off has nothing to do with this kind of troubles. Using the latest wp and php versions would ignore the safe_mode=on which means the gallery would still work. In order to fix the popup issue, you'd have to first change all your passwords, then find what's causing it and then remove the piece of code from the theme or db on your server... Hope you get it solved quickly. If you need personal assistance, please contact us using the contact form on our website.

    P.S.: if the plugin would cause this kind of issues, we'd have about 30.000 websites having similar troubles...

  9. Lauravl
    Member
    Posted 2 years ago #

    Okey, thanks for all the answers!

    Already changed al the passwords, http://www.fotovanjouwhuisdier.nl seems to be clean (according to Sucuri Scanner plugin). Right now working on http://www.perfectportret.nl.

    If I will have any question now or later I will ask. Thanks!

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic