mk2mark

Something I’ve just noticed, there is a wordpress.com stats plugin installed which works, but displays no hits to the site.

This is all very strange and I have made no real progress, what else can I do?

Something else that’s strange – the slideshow is not flipping through the posts.

I’ll be honest, I find it hard to understand how these things are linked. Surely this is something confined to the server itself – it seems far to random a thing for an AVG warning about our site to affect only what it has?

Ok thanks Tony.

I’m still curious about why my site is affected the way it is – I don’t understand how a decision by AVG somewhere would affect my site, and in such a manner.

AVG initially blocked my site weeks ago, and I experienced what we are seeing today. However, the site started working again – even though avg still listed it as a threat. How could this be if AVG is the reason the site is acting the way it is?

Yes, but I don’t think they have done anything about it – would that be the problem? How could it have been working since they blocked it in that case?

Just one site on the server. Running whm/cpanel which I know is overkill. The core install seems to be ok too, it’s not long since I completely overwrote everything there with the standard wordpress files and none of them show any modification since then.

I couldn’t see anything out of the ordinary in any of those files. I compared them to the original theme files.

I can’t figure it out, according to the AVG link there’s 15 compromised pages, but I have no idea how to track them down. Then if you go to the AVG link, click show more about threat activity and timeline, there hasn’t been any activity for quite some time. I think I’ve closed up the vulnerability, it was a timthumb image resizer that was part of my theme.

If this thing still is on my site how do I get rid of it?

Hey thanks a lot for this, I’m working my way through getting rid of this virus. Much appreciated.

Hi,

I can deactivate all the plugins, but reverting the theme might not be feasible right now since this is the busy time of day. I can do it but I would need to minimise the time on the 2011 theme. If I could check what you are doing that might help?

Done, really appreciate the help.

Wow, how do I fix this? I run the dedicated server myself. I have clamav and a firewall on it. Presumably the first step is to run a scan – anything else?

I have turned off all plugins, no effect. Turning on either adrotate or the social media plugin alone does not fix anything either.

Wonderful, thanks so much!

That looks promising. Ok I know I’m thick, but how do I make such a change? (thanks for your patience).