Cant find javascript malware !

Home Forums Support Forum Cant find javascript malware !

Tagged: 

This topic contains 8 replies, has 2 voices, and was last updated by  Anti-Malware Admin 10 years, 11 months ago.

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • #887

    andrei rub
    Member

    Hi  i am new to this  kind  of problema , one  of  my websites  got  hacked  , i downloaded your plugin , but  after  a full check there are no results…

    Can you  take  a look please  Eli ?

    http://sitecheck.sucuri.net/results/www.compagnonsdemtl.com

    Thx in advance.

    #888

    Anti-Malware Admin
    Key Master

    This looks like a type of infection that is not in my definitions yet. I can see it on your home page but cannot tell where it is coming from.

    If you send me your WP Admin login I’d love to track this down for you and add it to my definition update so that it can be automatically removed.

    #889

    andrei rub
    Member

    How  can i send  you  my  WP login ?

    #890

    Anti-Malware Admin
    Key Master

    You can email me directly: eli AT gotmls DOT net

    #891

    andrei rub
    Member

    Done . Waiting for your answer,

    Thx in Advance.

    #892

    Anti-Malware Admin
    Key Master

    Well I found it right away because it was not hidden in the code at all, it was actually inserted into a post in plain text. I removed it manually. I didn’t see any other issues on your site.

    Let me know if you need more help.

    #893

    andrei rub
    Member

    Thanks Eli  for  your help!!! Will  recommend  your website  and plugin!

    #898

    andrei rub
    Member

    Hi Eli,  Can you  please  tell  me  where  did  you  found  that  script  in post  ,  and  how  can i stop  ths  type  of  problems , cause  sims  like  my website  got  infected  again with exactly the  same script.

    Thx in advance.

    #899

    Anti-Malware Admin
    Key Master

    It was in post 2336. I could see the malicious javascript redirect in plain text entered into the post content area.

    Because this is the second time you have gotten infected with the same code, and you have already changed your password, I would suspect that this hacker has got another means of infecting your site. Is this a shared hosting account? Do you have any other sites on this server? It is possible that this hacker is using a vulnerability on another site to infect your DB directly.

    It looks as though koumbit.net has disabled you site for now. I suspect they are aware of your infection and have probably contacted you about clearing it up. If you can get them to re-enable the site I can help you clean it up again and see if I can figure out how this hack is getting in.

Viewing 9 posts - 1 through 9 (of 9 total)

You must be logged in to reply to this topic.

Comments are closed.