Is my site is infected with a trojan?

mickyfu said:

I don't want to sound like a condescending cunt, but ask your host for a backup copy.

Click to expand...

Innovatorz said:

That's a good idea but OP needs to know the date before he can proceed.

Click to expand...

mickyfu said:

Pretty sure most decent hosts can detect it.

Click to expand...

Innovatorz said:

I agree, but Godaddy won't do it.

Click to expand...

urobee said:

Hy,

I got this message when I try to reach my Wordpress site on PC but there is no message on phone:

You are not permitted to download the file "" because it is infected with the virus "HTML/ScrInject.B!tr".

URL = http://a****
File quarantined as: .

http://www.fortinet.com/ve?vn=HTML/ScrInject.B!tr
Client IP: 10.200.***.***
Server IP: 199.188.***.***
User name:
Group name:

/IPs and url are censored by me ofc/
What is this? :O

Click to expand...

sudo apt-get install clamav

sudo freshclam

clamscan -r /var/www

git status

Gogol said:

Let me guess, you have a wordpress setup over there and you installed some nulled theme/plugins?

First and foremost, scan your host for viruses. If you are on *nix, try installing clamav :

Code:

sudo apt-get install clamav

for updating db signature

Code:

sudo freshclam

and scanning your www folder

Code:

clamscan -r /var/www

From future, I recommend you to backup your project as a repository ( preferably git). That way you can detect malicious changes in the project very easily by doing

Code:

git status

Also, stop using nulled themes and plugins if you don't know what you are doing. VT scans are bullshit and they can't detect any decent PHP/ASP shells.

Click to expand...

redarrow said:

You no a lot are you a proper admin on servers ....cisco

Click to expand...

mickyfu said:

I'm pretty sure Godaddy is not a decent host.

Click to expand...