1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

[Help Me] To remove malware virus from my website

Discussion in 'Web Hosting' started by gullsinn, Oct 31, 2012.

  1. gullsinn

    gullsinn Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 24, 2009
    Messages:
    2,429
    Likes Received:
    2,210
    Gender:
    Male
    Occupation:
    Jobless :D
    Location:
    Graveyard
    Home Page:
    Hi Everyone,

    I need some help to remove the virus from my wordpress website.

    Help me in this. I tired to do this myself but i am failed.

    I don't have the access to the server / ftp etc

    I just have the access to the wordpress installed on this.

    Is there anyone who can help me?

    Below is my index.php code

    Code:
     <?php include('header.php');?>
    
    <div id="content_wrap">
    
    
    <?php if (have_posts()) : ?>
       <div id="post_wrap">
    
    
    <!-- start slider -->
            <script type="text/javascript">
              $(document).ready(function(){
              $("#slider").easySlider({
                  auto: true, 
                  continuous: true,
                  speed: 3000,
                  numeric: true,
                  prevText:'',
                  nextText:'',
                  controlsShow: true,
                  pause: 6000,
              });
              });
            </script>
    
    
         <div id="slider" style="background:url(<?php //bloginfo('template_directory');?>/images/post-image-bg.jpg) no-repeat top center; width:640px; height:423px;">
                    <div style="width:640px; overflow:hidden;">
                        <ul>
             
             <?php
         // set the $paged variable
           $paged = (get_query_var('paged')) ? get_query_var('paged') : 1;
           // query the posts of your custom post types
                 query_posts( array(
                        'post_type' => array('skin-posts', 'post'),
                        'showposts' => 10,
                        'category_name' => 'featured',
                        'paged' => $paged) // for paging links to work
                    );  
              ?>
                      
                      <?php while (have_posts()) : the_post(); 
                      $post_type_id = $post->ID;
                        $post_name = $post->post_name;
                        $post_type = $post->post_type;
                        
                        $prmalink_post_type = "/post_type/".$post_type."/".$post_type_id."/".$post_name;
                      
                        ?>
                             
                         <li style="min-height:369px;">
                         <table cellpadding="0" cellspacing="0" width="100%"><tr><td valign="middle" align="center" height="423">
                          <?php if($post_type == "skin-posts" || $post_type == "productreviews"){?>
                          
                          <a href="<?php bloginfo('siteurl')?><?php echo $prmalink_post_type; ?>">
                          
                          <?php }else { ?>
                              
                          <a href="<?php the_permalink(); ?>">
                              
                          <?php }?>
                         
                         <?php $image = get_post_meta($post->ID, 'slideshow_image', TRUE); ?>
                         
                         <?php if($image==''){?>
                         <img src="http://www.shavenowmagazine.com/wp-content/themes/shaveonhow/images/no-image-available.jpg" width="640" height="369" alt="" />
                         <?php } 
                          else { ?>
                          <img src="<?php echo $image; ?>" width="640" class="center" height="" style="height:auto;" alt="" />  
                          <?php } ?>
                          
                       </a> 
                       </td></tr></table>
                       </li>
                     <?php endwhile;?>                    
                         <div style="clear:both;"></div>
                       </ul>
                       <div style="clear:both;"></div>
                      </div>
                      <div style="clear:both;"></div>
                    </div>
                                 
                    
    <!-- end slider -->
    
    
    <div class="posts-cat">
    <h1>Grooming 101</h1>
    <?php query_posts('category_name=grooming&paged=$paged&posts_per_page=3'); ?>
    <?php while (have_posts()) : the_post(); ?>
    <div id="post">
    
    
        <div class="left">
        <a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>">
         <?php $image = get_post_meta($post->ID, 'home_post_image', TRUE); ?>
                         
         <?php if($image==''){?>
            <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
           <?php } 
            else { ?>
            <img src="<?php echo $image; ?>" alt="<?php the_title(); ?>" width="190" />  
          <?php } ?>
        </a>
        </div>
    
    
        <div class="right">    
          <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
          <div class="hideimage"><?php echo excerpt('100'); ?></div>    
         </div>
          <div class="clear"></div>
          <p class="readmore"><a href="<?php the_permalink() ?>">Read more...</a></p>
        <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>
        
        </div>
        <?php endwhile; ?>
    
    
    <div class="clear"></div>
        <p style="width:380px; float:left;"><a href="<?php bloginfo('siteurl')?>/cat/4/grooming">More Posts from Grooming 101</a></p>
        <p style="width:200px; float:right; text-align:right; padding-right:15px;"><a href="http://www.shavenow.com/" target="_blank"><img src="<?php bloginfo('template_directory');?>/images/shop_btn.png" class="stop_btn"/></a></p>
    
    
    </div><!--end posts cat-->
    
    
    
    
    
    
    <div class="posts-cat">
    <h1>Product Reviews</h1>
     <?php
         // set the $paged variable
           $paged = (get_query_var('paged')) ? get_query_var('paged') : 1;
           // query the posts of your custom post types
                 query_posts( array(
                        'post_type' => array(
                        'productreviews'),
                        'showposts' => 3,
                        'category_name' => 'productreviews',
                        'paged' => $paged) // for paging links to work
                    );  
              ?>
     <?php while (have_posts()) : the_post(); ?>
       <div id="post">
        <div class="left">
         <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
        </div>
    
    
        <div class="right"> 
        <?php 
        $post_type_id = $post->ID;
        $post_name = $post->post_name;
        
        $prmalink_post_type = "/post_type/productreviews/".$post_type_id."/".$post_name;
        ?>   
          <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
          <!--<h1><a href="<?php //bloginfo('siteurl')?><?php //echo $prmalink_post_type; ?>" rel="bookmark" title="Permanent Link to <?php //the_title_attribute(); ?>"><?php //the_title(); ?></a></h1>-->
          <div class="hideimage"><?php echo excerpt('55'); ?></div>    
         </div>
          <div class="clear"></div>
          <p class="readmore"><a href="<?php //the_permalink() ?>">Read more...</a></p>
          <!--<p class="readmore"><a href="<?php bloginfo('siteurl')?><?php echo $prmalink_post_type; ?>">Read more...</a></p>-->
        <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>
        </div>
        <?php endwhile; ?>
    
    
    <div class="clear"></div>
        <p style="width:380px; float:left;"><a href="<?php bloginfo('siteurl')?>/pages/product-reviews">More Posts from Product Reviews</a></p>
        <p style="width:200px; float:right; text-align:right; padding-right:15px;"><a href="http://www.shavenow.com/" target="_blank"><img src="<?php bloginfo('template_directory');?>/images/shop_btn.png" class="stop_btn"/></a></p>
    
    
    </div><!--end posts cat-->
    
    
    
    
    
    
    <div class="posts-cat">
    <h1>Men Culture</h1>
    <?php query_posts('category_name=menculture&paged=$paged&posts_per_page=3'); ?>
    <?php while (have_posts()) : the_post(); ?>
    
    
    <div id="post">
        <div class="left">
        <a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>">
         <?php $image = get_post_meta($post->ID, 'home_post_image', TRUE); ?>
                         
         <?php if($image==''){?>
            <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
           <?php } 
            else { ?>
            <img src="<?php echo $image; ?>" alt="<?php the_title(); ?>" width="190" />  
          <?php } ?>
        </a>
        </div>
    
    
        <div class="right">    
          <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
          <div class="hideimage"><?php echo excerpt('55'); ?></div>    
         </div>
          <div class="clear"></div>
          <p class="readmore"><a href="<?php the_permalink() ?>">Read more...</a></p>
        <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>
       </div>    
        <?php endwhile; ?>
    
    
    <div class="clear"></div>
        <p><a href="<?php bloginfo('siteurl')?>/cat/3/menculture">More Posts from Men Culture</a></p>
     
    </div><!--end posts cat-->
    
    
    
    
    <div class="posts-cat">
    <h1>Women Sex & Dating</h1>
    <?php query_posts('category_name=womendating&paged=$paged&posts_per_page=3'); ?>
    <?php while (have_posts()) : the_post(); ?>
    
    
    <div id="post">
        <div class="left grooming">
        <a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>">
         <?php $image = get_post_meta($post->ID, 'home_post_image', TRUE); ?>
                         
         <?php if($image==''){?>
            <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
           <?php } 
            else { ?>
            <img src="<?php echo $image; ?>" alt="<?php the_title(); ?>" width="190" />  
          <?php } ?>
        </a>
        </div>
    
    
        <div class="right">    
          <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
          <div class="hideimage"><?php echo excerpt('55'); ?></div>    
         </div>
          <div class="clear"></div>
          <p class="readmore"><a href="<?php the_permalink() ?>">Read more...</a></p>
        <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>
    
    
       </div>
        <?php endwhile; ?>
    
    
    <div class="clear"></div>
        <p><a href="<?php bloginfo('siteurl')?>/pages/women">More Posts from Women Sex & Dating</a></p>
     
     </div><!--end posts cat-->
    
    
    </div>
    <?php else : ?>
    <?php include('404.php');?>  
         
    <?php endif; ?>
    </div>
    
    
    <?php include('sidebar.php');?>
    <div class="clear"></div>
    <?php include('footer.php');?> 
    Is there anything <i frame that is encoded or hidden ? which i cannot see or any java script?

    This is the message i found when i scanned my website on some online tools

    Code:
     Hidden Iframes. Details: http://sucuri.net/malware/entry/MW:IFRAME:HD202
    <iframe style="visibility: hidden; display: none; display: none;" src="http://androidczad.info/"> 
     
    Last edited: Oct 31, 2012
  2. altrnt

    altrnt Registered Member

    Joined:
    Jun 26, 2011
    Messages:
    82
    Likes Received:
    16
    Sharing a link with malware on it is a very bad idea so I'd remove that right now.
    And how is this your website if you dont have access to the server/ftp etc? How are you going to do anything.

    You cant remove malware installed on your server if you just have access to wordpress.
     
  3. gullsinn

    gullsinn Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 24, 2009
    Messages:
    2,429
    Likes Received:
    2,210
    Gender:
    Male
    Occupation:
    Jobless :D
    Location:
    Graveyard
    Home Page:
    Can you help me in this or just gonna ask questions?
    I said i can just login in that website and i have a copy of it's database.
    I don't have the access to the server. I need help from the expert's who have faced these type of problems and solved them.
     
  4. -Jericho-

    -Jericho- Jr. Executive VIP Jr. VIP Premium Member

    Joined:
    Jan 10, 2010
    Messages:
    2,849
    Likes Received:
    1,704
    Location:
    Stalking My Ex-Wife
    It's a valid question since you apparently don't have access to the host and the hosting account may need to be accessed to fix it. Just accessing wordpress may not be enough.

    I would suggest deleting all of your plugins and reinstalling them but you may have an issue with something being saved in the database. I would also suggest reinstalling the theme or using another one.
     
    • Thanks Thanks x 1
  5. gullsinn

    gullsinn Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 24, 2009
    Messages:
    2,429
    Likes Received:
    2,210
    Gender:
    Male
    Occupation:
    Jobless :D
    Location:
    Graveyard
    Home Page:
    Thank you for your reply.
    but when i said above in my thread that i don't have the access to these things then why he is asking again?
    i know people will ask for this but i don't have it that's why i am here for help from expert's like you.
    I tired by changing the template but i cannot remove all plugin because most of them are custom coded.
    This is my client's website.
     
  6. -Jericho-

    -Jericho- Jr. Executive VIP Jr. VIP Premium Member

    Joined:
    Jan 10, 2010
    Messages:
    2,849
    Likes Received:
    1,704
    Location:
    Stalking My Ex-Wife
    Are you still showing a virus after changing the template? Have you upgraded to the newest wordpress? Have you tried disabling the plugins to see if the problem goes away?

    In the past I've found that there was an exploit in either the theme or a plugin. Honestly it's hard to help you further without knowing more about the problem. How do you know the site is infected?
     
  7. gullsinn

    gullsinn Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 24, 2009
    Messages:
    2,429
    Likes Received:
    2,210
    Gender:
    Male
    Occupation:
    Jobless :D
    Location:
    Graveyard
    Home Page:
    Yes i did everything but still having the problem.
    When i open the website it says the below message:

    Code:
     [COLOR=#660000][FONT=Helvetica][B]Warning: Something's Not Right Here![/B][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] contains malware. Your computer might catch a virus if you visit this site.[/FONT][/COLOR]
    [COLOR=#000000][FONT=Helvetica]Google has found malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed, and perhaps try again tomorrow or go somewhere else. 
    [/FONT][/COLOR]
     
  8. nemke82

    nemke82 Junior Member

    Joined:
    Mar 18, 2012
    Messages:
    108
    Likes Received:
    12
    Occupation:
    IT Linux and Windows Administrator
    Location:
    Europe
    Home Page:
    Hi,

    Page me privatly i can help you out .

    Kind regards,
     
  9. qrazy

    qrazy Senior Member

    Joined:
    Mar 19, 2012
    Messages:
    1,111
    Likes Received:
    1,712
    Location:
    Banana Republic
    First deactivate all the plugins and any new themes. Install this plugin and see if that helps..
     
  10. g4m3r

    g4m3r Registered Member

    Joined:
    Jan 8, 2012
    Messages:
    99
    Likes Received:
    81
    Occupation:
    computer scientist
    Location:
    gsoftwarelab.com
    Home Page:
    Reset you cpanel password or contact your Hosting provider than look at your header and footer!
     
  11. samylurch

    samylurch Newbie

    Joined:
    Mar 12, 2012
    Messages:
    20
    Likes Received:
    2
    Occupation:
    IM
    Location:
    big internetcity
    Home Page:
    The at this time best plugin against all this shit is Wordfence - install it! And look for "default.php" fast removing is important!
     
  12. StevenJones

    StevenJones Junior Member

    Joined:
    Mar 15, 2011
    Messages:
    148
    Likes Received:
    130
    Occupation:
    From pathetic school dropout to Succesful & Awesom
    Location:
    The Mountain Of Gold
    Home Page:
    Hello!

    Did you try using a plugin?

    hxxp://wordpress.0rg/extend/plugins/search.php?q=malware&sort=

    Or you can outsource and let it be scanned regularly by a company like
    Sucuri..

    hxxp://sucuri.n3t/

    Change the xx O and 3 obviously.. Can't send links yet unfortunately..

    I've been with sucuri for a very long time and had loads of trouble before signing up
    with them. Never had any problem since as they get alerted fast when something is
    wrong on your site.. They login and fix it.

    Only sign up if you got an additional $80 a year to spare.
     
  13. gullsinn

    gullsinn Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 24, 2009
    Messages:
    2,429
    Likes Received:
    2,210
    Gender:
    Male
    Occupation:
    Jobless :D
    Location:
    Graveyard
    Home Page:
    Thank you everyone for your suggestions but the problem is now resolved.