1

Building a website for a customer and as I sent him a link on Skype to the new page, he said he got alerted of a trojan virus. He clicked on the link on Skype and it opened in IE, he sent me a screenshot of the message.

client's screenshot of message shown when clicking the page

I obviously ran a couple anti virus (wordpress plugins) and they came clear.

Any idea what could be causing it?

Not sure what to tell them.

Improve this question
5
  • 1
    I removed the link to your page as we're not going to encourage people to visit an infected website.
    – John Conde ♦
    Aug 18, 2016 at 13:14
  • And it looks like you have been exploited.
    – John Conde ♦
    Aug 18, 2016 at 13:14
  • I understand your concern but I have a very good version of antivirus on my computer and have been trying to replicate this problem all day with no joy. Plus the antivirus plugins I ran also said there was no malicious file so I wonder if you saw any message yourself?
    – Luiza Rios
    Aug 18, 2016 at 13:16
  • An anti-virus and WP plugin is nowhere near enough! If you are running WP, it is highly likely that your site was compromised somehow. Nearly all compromised systems we see here run WP. WP is the most hacked software ever - period. Nothing has ever come close. Sorry. Work your way through the process of cleaning up your system and making it secure. Cheers!!
    – closetnoc
    Aug 18, 2016 at 15:30
  • These may help some: webmasters.stackexchange.com/questions/25189/… webmasters.stackexchange.com/questions/83498/… There was an excellent one I was looking for that I cannot find. I will poke around some more. But this is a start.
    – closetnoc
    Aug 19, 2016 at 2:03

1 Answer 1

Reset to default
0

Here are few steps that you need to do to remove the virus:

  1. Download page to your computer and set it up on your local server
  2. Scan the directory with your antivirus software and delete everything that is infected
  3. Update your wordpress and your themes / plugins
  4. Change administrator password

//but it seems that your contact form is infected. So you can maybe localize the problem and rebuild your contact form.

After all this steps, upload everything in your public_html directory and also upload your fresh and clean database up.

This steps shall do the trick.

Improve this answer
1
  • it helped me gain some confidence but it didn't actually solve it as antivirus software still didn't find anything, just in case it could help someone, I kept installing different plugins until I came across this one en-gb.wordpress.org/plugins/antivirus that finally found the attacker and I removed it. thanks for your help
    – Luiza Rios
    Aug 23, 2016 at 15:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.