WordPress.org

1. earle
   Member
   Posted 1 year ago #
   

   Hi there,
   I have a virus on my wordpress that is doing my head in! I'd really appreciate some help from someone who knows more than me in such matters.
   how can I check what files are infected so I can clean it? I've tried looking through them but to no avail.
   please help!

   my site is http://www.technopodcast.com/blog/
   using WordPress 3.3.2.

   other info:
   there has only been about 4 reports of it from users and I've only encountered a virus warning myself once. i.e. it does not happen on each visit.
   also google analytics shows that there are 0 visitors for the last five days (its never been like that before, the site has a few hundred visits or more a day)

   Kaspersky anti-virus reports the problem as :

   The requested URL cannot be provided
   Threat detected:
   object infected HEUR:Trojan.Script.Iframer

   I've tried to see if there is any malicious code but I cannot find any. if anyone has an idea, please help.

   many thanks,
   George

2. ahortin
   Member
   Posted 1 year ago #
   

   I performed a scan using Sucuri and you can see the results here...
   http://sitecheck.sucuri.net/results/www.technopodcast.com/blog

   Have a look through the results to see if it helps you, alternatively, those guys specialise in cleaning up sites infected with malware.

3. earle
   Member
   Posted 1 year ago #
   

   thanks a lot. it does seem like they want a lot of money for it though.
   do you know how I can find the virus in the code? there must be a way I can find out what php files are infected?

4. ahortin
   Member
   Posted 1 year ago #
   

   I suggest having a look through the following posts...
   http://codex.wordpress.org/FAQ_My_site_was_hacked

   http://wordpress.org/support/topic/exploits-and-godaddy?replies=28#post-1065779

   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/

   http://ottopress.com/2009/hacked-wordpress-backdoors/

5. Christine
   WP Yogi & Forum Moderator
   Posted 1 year ago #
   

   I've cleaned up a lot of sites and this is what I do.

   - Delete the entire wp-admin
   - Delete the entire wp-includes folder
   - Delete the root files except the wp-config.php
   - Re-upload fresh copies of wp-admin, wp-includes and root file.

   - Delete all plugins and re-upload fresh files
   - Go through all of the theme files and fix what you can.
   - Check to see as well if the other themes are infected.

   - Change all passwords - FTP, db, and admin

   - Hold breath, cross fingers and pray that it's all good.

   it's a lot of work, so paying someone who knows what they are doing is sometimes worth it.

   Good luck.

6. earle
   Member
   Posted 1 year ago #
   

   thanks :)

Topic Closed

This topic has been closed to new replies.