« previous next »
Pages: [1]   Go Down

Author Topic: really need help!avast report trojan on my wordpress site  (Read 6827 times)

0 Members and 1 Guest are viewing this topic.

waynewang

  • Guest
really need help!avast report trojan on my wordpress site
« on: March 09, 2012, 10:00:43 AM »
i hope somebody helps me in this problem,recently i frequently get "js:redirection-xx" warning when visiting my own site"hxxp://www.feibaibuke.com"(in chinese),"xx"after "redirection" changes,yesterday it's "PV",today is "QG".and block by AVAST!free from visiting.

i shares a host with some guy,no problem with their site,and no problem with my site's back-end too,warning only appears on front-end.

i run a check on "virustotal.com",but it shows my site is clean!is it a FP or my site really get infected by some trojan?what should i do?i somehow support my family by this site,so,it's really really about LIFE SAVING!!!

HELP!!!SOS!!!
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: really need help!avast report trojan on my wordpress site
« Reply #1 on: March 09, 2012, 10:22:49 AM »
Logged

Hermite15

  • Guest
Re: really need help!avast report trojan on my wordpress site
« Reply #2 on: March 09, 2012, 10:38:01 AM »
absolutely infected with malware it seems ...
Logged

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: really need help!avast report trojan on my wordpress site
« Reply #3 on: March 09, 2012, 03:02:14 PM »
You should not be given any more warnings, as the exploit is now removed. :)

http://sitecheck.sucuri.net/results/feibaibuke.com
Logged
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

Hermite15

  • Guest
Re: really need help!avast report trojan on my wordpress site
« Reply #4 on: March 09, 2012, 03:50:08 PM »
Quote from: !Donovan on March 09, 2012, 03:02:14 PM
You should not be given any more warnings, as the exploit is now removed. :)

http://sitecheck.sucuri.net/results/feibaibuke.com

this site is now down
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: really need help!avast report trojan on my wordpress site
« Reply #5 on: March 09, 2012, 04:43:51 PM »
« Last Edit: March 09, 2012, 04:51:35 PM by Pondus »
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34049
  • malware fighter
Re: really need help!avast report trojan on my wordpress site
« Reply #6 on: March 09, 2012, 11:45:30 PM »
I get a benign here: htxp://zulu.zscaler.com/submission/show/d66151f722021534737758cf5bc157f7-1331317727
and here: htxp://sitecheck.sucuri.net/results/http://www.feibaibuke.com/
suspicious here: htxp://urlquery.net/report.php?id=29942

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

waynewang

  • Guest
Re: really need help!avast report trojan on my wordpress site
« Reply #7 on: March 10, 2012, 02:58:26 AM »
thanks to all experts above,your advise and report is helping!

i've contacted host owner,there truely is expliot on my site,and removed some harmful code,but still,we failed to find out where virus comes from,i didt make any special move on this site,system and plugings is updated...really weired...

and after exploit been removed,i used online checking tool test my site,and i got a safe report,but after about 2 hours,when i test again,these virus comes back!but again 1 hour past,until now,virus seems vanished....did i deal with some kind of ghost???
Logged

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: really need help!avast report trojan on my wordpress site
« Reply #8 on: March 10, 2012, 01:07:38 PM »
Does the malware still come back? If so, you should check to make sure that none of your other files are writing malware to your site.

Also, if you haven't done already, it is recommended to change your password.

See: http://codex.wordpress.org/FAQ_My_site_was_hacked
Logged
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."
Pages: [1]   Go Up
« previous next »