Virus problem (6 posts)

  1. earle
    Posted 4 years ago #

    Hi there,
    I have a virus on my wordpress that is doing my head in! I'd really appreciate some help from someone who knows more than me in such matters.
    how can I check what files are infected so I can clean it? I've tried looking through them but to no avail.
    please help!

    my site is http://www.technopodcast.com/blog/
    using WordPress 3.3.2.

    other info:
    there has only been about 4 reports of it from users and I've only encountered a virus warning myself once. i.e. it does not happen on each visit.
    also google analytics shows that there are 0 visitors for the last five days (its never been like that before, the site has a few hundred visits or more a day)

    Kaspersky anti-virus reports the problem as :

    The requested URL cannot be provided
    Threat detected:
    object infected HEUR:Trojan.Script.Iframer

    I've tried to see if there is any malicious code but I cannot find any. if anyone has an idea, please help.

    many thanks,

  2. Anthony Hortin
    Posted 4 years ago #

    I performed a scan using Sucuri and you can see the results here...

    Have a look through the results to see if it helps you, alternatively, those guys specialise in cleaning up sites infected with malware.

  3. earle
    Posted 4 years ago #

    thanks a lot. it does seem like they want a lot of money for it though.
    do you know how I can find the virus in the code? there must be a way I can find out what php files are infected?

  4. Anthony Hortin
    Posted 4 years ago #

  5. I've cleaned up a lot of sites and this is what I do.

    - Delete the entire wp-admin
    - Delete the entire wp-includes folder
    - Delete the root files except the wp-config.php
    - Re-upload fresh copies of wp-admin, wp-includes and root file.

    - Delete all plugins and re-upload fresh files
    - Go through all of the theme files and fix what you can.
    - Check to see as well if the other themes are infected.

    - Change all passwords - FTP, db, and admin

    - Hold breath, cross fingers and pray that it's all good.

    it's a lot of work, so paying someone who knows what they are doing is sometimes worth it.

    Good luck.

  6. earle
    Posted 4 years ago #

    thanks :)

Topic Closed

This topic has been closed to new replies.

About this Topic