« previous next »
Pages: [1]   Go Down

Author Topic: Trojan  (Read 2981 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Trojan
« on: February 11, 2016, 07:40:56 PM »
Hi!
I logged in on one friends wp pages on hes domain and my virussoftware started to warn me for virus:

Got this messaje:

http://xxxx-xxxx.se/wp-admin/load-scripts.php?c=1&load%5B%5D=hoverIntent,common,admin-bar,wp-ajax-response,jquery-color,wp-lists,quicktags,jquery-query,admin-comments,jquery-ui-core,jquery-&load%5B%5D=ui-widget,jquery-ui-mouse,jquery-ui-sortable,postbo|{deflate}
Infection: JS:Iframe-EPM [Trj]
Process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

What should i do to get ride of it?

I wrote to the hoast to were his domain are...

What can and what should i do?

/Sanne
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Trojan
« Reply #1 on: February 11, 2016, 07:48:51 PM »
Removing the infection and updating JQuery would be a good start.
Logged

REDACTED

  • Guest
Re: Trojan
« Reply #2 on: February 11, 2016, 07:54:59 PM »
I dont know wich file i should remove...anyone who can help me with this???

Please!!!
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Trojan
« Reply #3 on: February 11, 2016, 08:06:28 PM »
First file to check is in the link you provided.

Run (online) scans to see where there are problems and what problems they are.
Logged

REDACTED

  • Guest
Re: Trojan
« Reply #4 on: February 11, 2016, 08:11:17 PM »
Can i do that with my avast or shold i choose something ealse?
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Trojan
« Reply #5 on: February 11, 2016, 08:22:01 PM »
If you have to ask things like that, you should hire someone who knows about security, websites, web-servers and such.
Logged

REDACTED

  • Guest
Re: Trojan
« Reply #6 on: February 11, 2016, 08:25:03 PM »
Had got so greate help from this forum before...please....anyone?
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Trojan
« Reply #7 on: February 11, 2016, 08:33:20 PM »
- Remove the malicious code
- Update JQuery
- Run (online) scans to see what other problems there are and fix them.
« Last Edit: February 11, 2016, 08:35:39 PM by Eddy »
Logged

REDACTED

  • Guest
Re: Trojan
« Reply #8 on: February 11, 2016, 08:38:38 PM »
Sorry...you talking words i do not now...im used to use computer, but not words like....malicious code...can you help me understand litle better?
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Trojan
« Reply #9 on: February 11, 2016, 08:50:46 PM »
Your best option is to hire someone who has the knowledge to get the site cleaned and safe.

If we should teach/explain everything to you first it will take at least 2 years to learn enough before you know enough to clean and protect the site yourself.
Logged

REDACTED

  • Guest
Re: Trojan
« Reply #10 on: February 11, 2016, 08:58:17 PM »
I understand that.

Do you think it best to empty all on the domain and install it again...do the virus dissaperer then or...? Can that be a way for me. Its not my own domain, so....
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Trojan
« Reply #11 on: February 11, 2016, 10:53:04 PM »
Quote
Infection: JS:Iframe-EPM [Trj]
Most likely related to this  >>  https://blog.sucuri.net/2015/11/jquery-min-php-malware-affects-thousands-of-websites.html

Sucuri can help for a fee  https://sucuri.net/

Check website here  https://sitecheck.sucuri.net/

« Last Edit: February 11, 2016, 11:08:09 PM by Pondus »
Logged

REDACTED

  • Guest
Re: Trojan
« Reply #12 on: February 11, 2016, 11:08:20 PM »
Thanks so verry much!!!!!!!!!!!!!!!!!!!
Logged
Pages: [1]   Go Up
« previous next »