Home › Forums › Support Forum › Cant find javascript malware !
Tagged: new threat
This topic contains 8 replies, has 2 voices, and was last updated by Anti-Malware Admin 11 years, 9 months ago.
-
AuthorPosts
-
January 22, 2014 at 5:55 am #887
Hi i am new to this kind of problema , one of my websites got hacked , i downloaded your plugin , but after a full check there are no results…
Can you take a look please Eli ?
http://sitecheck.sucuri.net/results/www.compagnonsdemtl.com
Thx in advance.
January 22, 2014 at 7:34 am #888This looks like a type of infection that is not in my definitions yet. I can see it on your home page but cannot tell where it is coming from.
If you send me your WP Admin login I’d love to track this down for you and add it to my definition update so that it can be automatically removed.
January 22, 2014 at 8:09 am #889How can i send you my WP login ?
January 22, 2014 at 8:13 am #890You can email me directly: eli AT gotmls DOT net
January 22, 2014 at 8:18 am #891Done . Waiting for your answer,
Thx in Advance.
January 22, 2014 at 10:51 am #892Well I found it right away because it was not hidden in the code at all, it was actually inserted into a post in plain text. I removed it manually. I didn’t see any other issues on your site.
Let me know if you need more help.
January 23, 2014 at 5:19 am #893Thanks Eli for your help!!! Will recommend your website and plugin!
January 27, 2014 at 6:32 am #898Hi Eli, Can you please tell me where did you found that script in post , and how can i stop ths type of problems , cause sims like my website got infected again with exactly the same script.
Thx in advance.
January 28, 2014 at 12:32 am #899It was in post 2336. I could see the malicious javascript redirect in plain text entered into the post content area.
Because this is the second time you have gotten infected with the same code, and you have already changed your password, I would suspect that this hacker has got another means of infecting your site. Is this a shared hosting account? Do you have any other sites on this server? It is possible that this hacker is using a vulnerability on another site to infect your DB directly.
It looks as though koumbit.net has disabled you site for now. I suspect they are aware of your infection and have probably contacted you about clearing it up. If you can get them to re-enable the site I can help you clean it up again and see if I can figure out how this hack is getting in.
-
AuthorPosts
You must be logged in to reply to this topic.

