• Resolved Bob A

    (@bob-a-1)


    Hi Eli
    I download your plugin based on the good reviews it was getting and also made a donation. However it does not appear to be helping me getting malware off of my sites. It also seems to manifest itself again and again. The malware that got on my sites was mw exploit blackhole 1. Could you please help?

    Regards
    Bob A

    https://www.ads-software.com/plugins/gotmls/

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author Eli

    (@scheeeli)

    Hi Bob,
    I would be happy to help. The only clue you gave me here indicates that you are using Sucuri to tell you that your site is infected. Sucuri caches their scan results, did you click the link at the bottom of their page to “Force a Re-scan” to clear the cache?

    Thread Starter Bob A

    (@bob-a-1)

    Hi Eli
    I guess what I mean is after I run the plugin and it finds know threats and I clean them they reappear again.They just keep coming back.

    Plugin Author Eli

    (@scheeeli)

    Is your site on a sheared hosting plan?
    How many other sites do you have on that plan?
    Are any of the other sites infected?
    Have you cleaned all the site at about the same time?
    How long does it take to get reinfected?

    Plugin Author Eli

    (@scheeeli)

    Hi Bob, I got your direct email with your answers. Here is what everyone need to understand about the problem you (and many others) are facing:
    It is extremely easy for malware infections to spread from one site on your shared hosting server to another. There is nothing on your typical shared hosting server to stop a hacker’s script from copying itself all over your site and further to all the other sites on your account in just seconds. It even possible in many cases for the infection to spread out to (or from) another user’s account on that server.

    Usually your hosting provider will take this opportunity to up-sell you to a VPS. While this option may improve you sites’ performance and usually prevents attack from crossing over from (or to) other users, it is not likely to stop any of the infection on any of your existing sites from spreading to all the other sites that are on this new VPS.

    You said you have about 10 site on this shared hosting server and my plugin is on only 2 of them, but you think they are all infected. That simply won’t get your server clean. It is possible that you could get rid of this threat once and for all if you were able to coordinate your attack and completely clean all 10 sites at the same time, but the timing would be critical and it may take you several attempts to get them all clean at the same time with the infection spreading to the files you just cleaned. The best option is to move your site to a Super Secure Hosting provider ??

    Hi Eli, I am having the same problem as Bob. I probably have 6 WP blogs are are not infected. Do you know if hostgator has “Super Secure Hosting” ?

    Plugin Author Eli

    (@scheeeli)

    Hi tmpetro,
    No, hostgator is definitely not Super Secure Hosting ??

    Have you scanned all 6 sites with my plugin?

    How many are infected?

    Yes I have run the scan on all of them BUT not at the same time.

    Also, one of my sites does not the the key where I donated. Can you help me correct that too?

    Plugin Author Eli

    (@scheeeli)

    Hi tmpetro,
    Email me the key for that site and I’ll look for the registration.

    eli AT gotmls DOT net

    how do I change the key on the plug-in?

    Plugin Author Eli

    (@scheeeli)

    You don’t change the key. You just click “Get FREE Key” and then you register that Key to your email address and download the definition updates.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Still infected after doing several scans and cleans’ is closed to new replies.