WordPress Virus attack ,Please Help me

  • i have 2 blogs in ixwebhosting.com shared servers. those 2 blogs are recently attacking by a strange script ,which automatically added before </body> in every file. and prompt users to download a virus.

    Please help me. i tried all things like changing ftp password,updating wordpress…. nothing works…is there any problem from host side?

Viewing 10 replies - 1 through 10 (of 10 total)

  • if you are the only person who has access to the blogs, then the uploader is on your computer. What it is doing is automatically altering your files locally, and using your FTP client to update the files w/o you doing anything. So changing the ftp password doesnt work because the next time you log in to ftp, it just re-records the new password.

    Get yourself a good antivirus and scan locally.

    My boss had the same issue and all his websites got the same kind of bug.

    Thread Starter sahithp

    (@sahithp)

    i have latest bitdefender antivirus working perfectly, i have so many sites in many hosts. But getting affect only for these 2 blogs. Remaining sites are working fine in other hosts.

    How to Completely Clean a Hacked WordPress Install

    Thread Starter sahithp

    (@sahithp)

    ofcourse, i have cleaned it completely 4 times till now., but it was attacking again and again.,,

    Tell your web host; the attack might be coming from shared hosting.

    Thread Starter sahithp

    (@sahithp)

    i just sent a support ticket,waiting for replay. may i know any one here got this script attack before closing body tag </body>

    What script is it? By any chance does it involved iframes and links to unknown sites?

    ixwebhosting.com is a crap host. move.

    they have a history around here,

    https://www.ads-software.com/support/topic/221100?replies=21

    Thread Starter sahithp

    (@sahithp)

    @thetanooki

    it is a script which added automatically before </body> tag in every file contains that closing body tag.

    UPDATE : they replied to my mail. they said my system has virus and it is affecting it. but fact is my system is virus free. once again i am telling i have so many accounts in other hosts. why they are not affected. and why this account only getting repeated attention.

    i asked them these questions. waiting for their reply

    It looks like your host has the security problem; read whooami’s link above.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘WordPress Virus attack ,Please Help me’ is closed to new replies.