Something strange, maybe wp virus?

  • Today i see this js script attached to an few pages of wp installation. I delete all of them manually, – but don’t understood how this happens…

    In start of every one of this code pieces ws <!–ZOS–>
    Next goes an encrypted JS.

    Can anybody suggest – what is this kind of?

    Thnaks …

Viewing 5 replies - 1 through 5 (of 5 total)

  • It’s not a virus it’s poor administration. Most likely the files were left writable by anyone and everyone, and probably wasn’t upgraded like it should have been leaving it vulnerable to attack. Follow these directions next time.

    Thread Starter softm

    (@softm)

    Jeremy, i have 0755 attributes, setted up by

    chmod -R 755 * command from root of my web-folder …

    I verify then … yea all files have 0755. And this was done before i was hacked today again!

    As u understood, i know what is permissions…

    PS. Today i got this situation once more … Maybe this is a hole?

    Was need to knock off the site …

    Pls help me …

    Thread Starter softm

    (@softm)

    First time m using something pre-written … Always try before to write from scratch (php+smarty). This time try to make my new portfolio site in WP.

    And have an ?? result ??

    What version of wp are you using unless it’s 2.2.3 it has numerous vulnerabilities. You need to keep it upgraded if you don’t want problems.

    Thread Starter softm

    (@softm)

    2.2.1, Thank for u help. Will upgrade ??

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Something strange, maybe wp virus?’ is closed to new replies.

Tags