trojan in your plugin

Resolved

(@paraskumar)

<script
                    data-cfasync="false"
                    type="text/javascript"
                    src="//s7.addthis.com/js/300/addthis_widget.js#pubid=wp-47bcc257b2aeb6d3b74684a3c431cf31 "
                    async="async"
                >
                </script>

this is the script above and the above jas shows that you have got trojan in this file. why do you add trojan? please remove it.

https://wordpress.org/plugins/addthis/

Viewing 4 replies - 1 through 4 (of 4 total)

Moderator Jan Dembowski
(@jdembowski)

Forum Moderator and Brute Squad

8 years, 3 months ago

It’s not a trojan or malware. It’s part of using this plugin which is software as a service.

If you do not want to use this service then don’t use this plugin.

Plugin Contributor Julka Grodel
(@jgrodel)

8 years, 3 months ago

Hi Paraskumar,

Thanks for letting us know about your issue.

As Jan mentions, AddThis tools as software as a service and require addthis_widget.js to be included on any page where you want our tools. This helps insures that when different social sites change how shares are done to their services, or new social services come out, we can make adjustments as needed.

Thanks,
Julka

Thread Starter paraskumar
(@paraskumar)

8 years, 3 months ago

i did not mean to offend anyone with all due respect and appriciation to the work you (plugin makers) are doing. It is very irritating when the antivirus continuously beeps while we load the page having this and also where ever we click first it redirects to http://hidcptqmerifcusymaqddcomolsujibeptsmycmqsrwgrcmywshgnfpjhcc.com/rot.aspx this page on a new tab.. Which makes people suspicious and owners conplain to webmasters regarding this. is there a solution to it?

Regards,
Paraskumar

Plugin Contributor Julka Grodel
(@jgrodel)

8 years, 2 months ago

Hi Paraskumar,

The issue you’re describing doesn’t sound like anything addthis_widget.js would do. It doesn’t take over your first click on the page, but I’ve seen that before with a user who was using Sweet Captcha. I’m sure there are others beside Sweet Captcha who do things just as nefarious.

Would you be able to share with us the anti-virus software that’s pointing at us as a trojan, and the URL it’s beeping on? If you’re prefer to share this privately, you can email us at help@addthis.com.

Thanks,
Julka

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘trojan in your plugin’ is closed to new replies.

Tags