[Help Me] To remove malware virus from my website

gullsinn · Oct 31, 2012

Hi Everyone,

I need some help to remove the virus from my wordpress website.

Help me in this. I tired to do this myself but i am failed.

I don't have the access to the server / ftp etc

I just have the access to the wordpress installed on this.

Is there anyone who can help me?

Below is my index.php code

Code:

 <?php include('header.php');?>

<div id="content_wrap">


<?php if (have_posts()) : ?>
   <div id="post_wrap">


<!-- start slider -->
        <script type="text/javascript">
          $(document).ready(function(){
          $("#slider").easySlider({
              auto: true, 
              continuous: true,
              speed: 3000,
              numeric: true,
              prevText:'',
              nextText:'',
              controlsShow: true,
              pause: 6000,
          });
          });
        </script>


     <div id="slider" style="background:url(<?php //bloginfo('template_directory');?>/images/post-image-bg.jpg) no-repeat top center; width:640px; height:423px;">
                <div style="width:640px; overflow:hidden;">
                    <ul>
         
         <?php
     // set the $paged variable
       $paged = (get_query_var('paged')) ? get_query_var('paged') : 1;
       // query the posts of your custom post types
             query_posts( array(
                    'post_type' => array('skin-posts', 'post'),
                    'showposts' => 10,
                    'category_name' => 'featured',
                    'paged' => $paged) // for paging links to work
                );  
          ?>
                  
                  <?php while (have_posts()) : the_post(); 
                  $post_type_id = $post->ID;
                    $post_name = $post->post_name;
                    $post_type = $post->post_type;
                    
                    $prmalink_post_type = "/post_type/".$post_type."/".$post_type_id."/".$post_name;
                  
                    ?>
                         
                     <li style="min-height:369px;">
                     <table cellpadding="0" cellspacing="0" width="100%"><tr><td valign="middle" align="center" height="423">
                      <?php if($post_type == "skin-posts" || $post_type == "productreviews"){?>
                      
                      <a href="<?php bloginfo('siteurl')?><?php echo $prmalink_post_type; ?>">
                      
                      <?php }else { ?>
                          
                      <a href="<?php the_permalink(); ?>">
                          
                      <?php }?>
                     
                     <?php $image = get_post_meta($post->ID, 'slideshow_image', TRUE); ?>
                     
                     <?php if($image==''){?>
                     <img src="http://www.shavenowmagazine.com/wp-content/themes/shaveonhow/images/no-image-available.jpg" width="640" height="369" alt="" />
                     <?php } 
                      else { ?>
                      <img src="<?php echo $image; ?>" width="640" class="center" height="" style="height:auto;" alt="" />  
                      <?php } ?>
                      
                   </a> 
                   </td></tr></table>
                   </li>
                 <?php endwhile;?>                    
                     <div style="clear:both;"></div>
                   </ul>
                   <div style="clear:both;"></div>
                  </div>
                  <div style="clear:both;"></div>
                </div>
                             
                
<!-- end slider -->


<div class="posts-cat">
<h1>Grooming 101</h1>
<?php query_posts('category_name=grooming&paged=$paged&posts_per_page=3'); ?>
<?php while (have_posts()) : the_post(); ?>
<div id="post">


    <div class="left">
    <a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>">
     <?php $image = get_post_meta($post->ID, 'home_post_image', TRUE); ?>
                     
     <?php if($image==''){?>
        <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
       <?php } 
        else { ?>
        <img src="<?php echo $image; ?>" alt="<?php the_title(); ?>" width="190" />  
      <?php } ?>
    </a>
    </div>


    <div class="right">    
      <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
      <div class="hideimage"><?php echo excerpt('100'); ?></div>    
     </div>
      <div class="clear"></div>
      <p class="readmore"><a href="<?php the_permalink() ?>">Read more...</a></p>
    <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>
    
    </div>
    <?php endwhile; ?>


<div class="clear"></div>
    <p style="width:380px; float:left;"><a href="<?php bloginfo('siteurl')?>/cat/4/grooming">More Posts from Grooming 101</a></p>
    <p style="width:200px; float:right; text-align:right; padding-right:15px;"><a href="http://www.shavenow.com/" target="_blank"><img src="<?php bloginfo('template_directory');?>/images/shop_btn.png" class="stop_btn"/></a></p>


</div><!--end posts cat-->






<div class="posts-cat">
<h1>Product Reviews</h1>
 <?php
     // set the $paged variable
       $paged = (get_query_var('paged')) ? get_query_var('paged') : 1;
       // query the posts of your custom post types
             query_posts( array(
                    'post_type' => array(
                    'productreviews'),
                    'showposts' => 3,
                    'category_name' => 'productreviews',
                    'paged' => $paged) // for paging links to work
                );  
          ?>
 <?php while (have_posts()) : the_post(); ?>
   <div id="post">
    <div class="left">
     <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
    </div>


    <div class="right"> 
    <?php 
    $post_type_id = $post->ID;
    $post_name = $post->post_name;
    
    $prmalink_post_type = "/post_type/productreviews/".$post_type_id."/".$post_name;
    ?>   
      <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
      <!--<h1><a href="<?php //bloginfo('siteurl')?><?php //echo $prmalink_post_type; ?>" rel="bookmark" title="Permanent Link to <?php //the_title_attribute(); ?>"><?php //the_title(); ?></a></h1>-->
      <div class="hideimage"><?php echo excerpt('55'); ?></div>    
     </div>
      <div class="clear"></div>
      <p class="readmore"><a href="<?php //the_permalink() ?>">Read more...</a></p>
      <!--<p class="readmore"><a href="<?php bloginfo('siteurl')?><?php echo $prmalink_post_type; ?>">Read more...</a></p>-->
    <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>
    </div>
    <?php endwhile; ?>


<div class="clear"></div>
    <p style="width:380px; float:left;"><a href="<?php bloginfo('siteurl')?>/pages/product-reviews">More Posts from Product Reviews</a></p>
    <p style="width:200px; float:right; text-align:right; padding-right:15px;"><a href="http://www.shavenow.com/" target="_blank"><img src="<?php bloginfo('template_directory');?>/images/shop_btn.png" class="stop_btn"/></a></p>


</div><!--end posts cat-->






<div class="posts-cat">
<h1>Men Culture</h1>
<?php query_posts('category_name=menculture&paged=$paged&posts_per_page=3'); ?>
<?php while (have_posts()) : the_post(); ?>


<div id="post">
    <div class="left">
    <a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>">
     <?php $image = get_post_meta($post->ID, 'home_post_image', TRUE); ?>
                     
     <?php if($image==''){?>
        <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
       <?php } 
        else { ?>
        <img src="<?php echo $image; ?>" alt="<?php the_title(); ?>" width="190" />  
      <?php } ?>
    </a>
    </div>


    <div class="right">    
      <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
      <div class="hideimage"><?php echo excerpt('55'); ?></div>    
     </div>
      <div class="clear"></div>
      <p class="readmore"><a href="<?php the_permalink() ?>">Read more...</a></p>
    <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>
   </div>    
    <?php endwhile; ?>


<div class="clear"></div>
    <p><a href="<?php bloginfo('siteurl')?>/cat/3/menculture">More Posts from Men Culture</a></p>
 
</div><!--end posts cat-->




<div class="posts-cat">
<h1>Women Sex & Dating</h1>
<?php query_posts('category_name=womendating&paged=$paged&posts_per_page=3'); ?>
<?php while (have_posts()) : the_post(); ?>


<div id="post">
    <div class="left grooming">
    <a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>">
     <?php $image = get_post_meta($post->ID, 'home_post_image', TRUE); ?>
                     
     <?php if($image==''){?>
        <img src="<?php echo catch_that_image() ?>" alt="<?php the_title(); ?>" width="190" />
       <?php } 
        else { ?>
        <img src="<?php echo $image; ?>" alt="<?php the_title(); ?>" width="190" />  
      <?php } ?>
    </a>
    </div>


    <div class="right">    
      <h1><a href="<?php the_permalink() ?>" rel="bookmark" title="Permanent Link to <?php the_title_attribute(); ?>"><?php the_title(); ?></a></h1>
      <div class="hideimage"><?php echo excerpt('55'); ?></div>    
     </div>
      <div class="clear"></div>
      <p class="readmore"><a href="<?php the_permalink() ?>">Read more...</a></p>
    <img src="<?php bloginfo('template_directory');?>/images/post_line.png"/>


   </div>
    <?php endwhile; ?>


<div class="clear"></div>
    <p><a href="<?php bloginfo('siteurl')?>/pages/women">More Posts from Women Sex & Dating</a></p>
 
 </div><!--end posts cat-->


</div>
<?php else : ?>
<?php include('404.php');?>  
     
<?php endif; ?>
</div>


<?php include('sidebar.php');?>
<div class="clear"></div>
<?php include('footer.php');?>

Is there anything <i frame that is encoded or hidden ? which i cannot see or any java script?

This is the message i found when i scanned my website on some online tools

Code:

 Hidden Iframes. Details: http://sucuri.net/malware/entry/MW:IFRAME:HD202
<iframe style="visibility: hidden; display: none; display: none;" src="http://androidczad.info/">

altrnt · Oct 31, 2012

Sharing a link with malware on it is a very bad idea so I'd remove that right now.
And how is this your website if you dont have access to the server/ftp etc? How are you going to do anything.

You cant remove malware installed on your server if you just have access to wordpress.

gullsinn · Oct 31, 2012

altrnt said:
Sharing a link with malware on it is a very bad idea so I'd remove that right now.
And how is this your website if you dont have access to the server/ftp etc? How are you going to do anything.

You cant remove malware installed on your server if you just have access to wordpress.

Can you help me in this or just gonna ask questions?
I said i can just login in that website and i have a copy of it's database.
I don't have the access to the server. I need help from the expert's who have faced these type of problems and solved them.

-Jericho- · Oct 31, 2012

gullsinn said:
Can you help me in this or just gonna ask questions?
I said i can just login in that website and i have a copy of it's database.
I don't have the access to the server. I need help from the expert's who have faced these type of problems and solved them.

It's a valid question since you apparently don't have access to the host and the hosting account may need to be accessed to fix it. Just accessing wordpress may not be enough.

I would suggest deleting all of your plugins and reinstalling them but you may have an issue with something being saved in the database. I would also suggest reinstalling the theme or using another one.

gullsinn · Oct 31, 2012

-Jericho- said:
It's a valid question since you apparently don't have access to the host and the hosting account may need to be accessed to fix it. Just accessing wordpress may not be enough.

I would suggest deleting all of your plugins and reinstalling them but you may have an issue with something being saved in the database. I would also suggest reinstalling the theme or using another one.

Thank you for your reply.
but when i said above in my thread that i don't have the access to these things then why he is asking again?
i know people will ask for this but i don't have it that's why i am here for help from expert's like you.
I tired by changing the template but i cannot remove all plugin because most of them are custom coded.
This is my client's website.

-Jericho- · Nov 1, 2012

gullsinn said:
Thank you for your reply.
but when i said above in my thread that i don't have the access to these things then why he is asking again?
i know people will ask for this but i don't have it that's why i am here for help from expert's like you.
I tired by changing the template but i cannot remove all plugin because most of them are custom coded.
This is my client's website.

Are you still showing a virus after changing the template? Have you upgraded to the newest wordpress? Have you tried disabling the plugins to see if the problem goes away?

In the past I've found that there was an exploit in either the theme or a plugin. Honestly it's hard to help you further without knowing more about the problem. How do you know the site is infected?

gullsinn · Nov 1, 2012

-Jericho- said:
Are you still showing a virus after changing the template? Have you upgraded to the newest wordpress? Have you tried disabling the plugins to see if the problem goes away?

In the past I've found that there was an exploit in either the theme or a plugin. Honestly it's hard to help you further without knowing more about the problem. How do you know the site is infected?

Yes i did everything but still having the problem.
When i open the website it says the below message:

Code:

 [COLOR=#660000][FONT=Helvetica][B]Warning: Something's Not Right Here![/B][/FONT][/COLOR][COLOR=#000000][FONT=Helvetica] contains malware. Your computer might catch a virus if you visit this site.[/FONT][/COLOR]
[COLOR=#000000][FONT=Helvetica]Google has found malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed, and perhaps try again tomorrow or go somewhere else.

[/FONT][/COLOR]

nemke82 · Nov 25, 2012

Hi,

Page me privatly i can help you out .

Kind regards,

qrazy · Nov 25, 2012

First deactivate all the plugins and any new themes. Install this plugin and see if that helps..

g4m3r · Nov 26, 2012

Reset you cpanel password or contact your Hosting provider than look at your header and footer!

samylurch · Nov 26, 2012

The at this time best plugin against all this shit is Wordfence - install it! And look for "default.php" fast removing is important!

StevenJones · Nov 26, 2012

Hello!

Did you try using a plugin?

hxxp://wordpress.0rg/extend/plugins/search.php?q=malware&sort=

Or you can outsource and let it be scanned regularly by a company like
Sucuri..

hxxp://sucuri.n3t/

Change the xx O and 3 obviously.. Can't send links yet unfortunately..

I've been with sucuri for a very long time and had loads of trouble before signing up
with them. Never had any problem since as they get alerted fast when something is
wrong on your site.. They login and fix it.

Only sign up if you got an additional $80 a year to spare.

gullsinn · Nov 30, 2012

Thank you everyone for your suggestions but the problem is now resolved.

[Help Me] To remove malware virus from my website

gullsinn

Elite Member

altrnt

Registered Member

gullsinn

Elite Member

-Jericho-

Elite Member

gullsinn

Elite Member

-Jericho-

Elite Member

gullsinn

Elite Member

nemke82

Junior Member

qrazy

Senior Member

g4m3r

Junior Member

samylurch

Newbie

StevenJones

Junior Member

gullsinn

Elite Member

Main Menu

Marketplace

Making Money

BlackHat World