Author Topic: [Resolved - K] Malware infections stopping spyware form working?  (Read 8150 times)

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • Posts: 7670
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #30 on: May 29, 2015, 07:37:17 AM »
Hiya Chalkey,

Yes please link to this thread for the sites you mention, also yes I confirm at this present time I see no evidence to indicate the presence of malware or infection on your system.

Thank you,

Kevin..... :t

Offline Chalkie

  • Bronze Member
  • Posts: 76
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #31 on: May 29, 2015, 07:49:16 AM »
OK Kevin, great thanks again.

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • Posts: 7670
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #32 on: May 29, 2015, 08:18:16 AM »
Let me know the outcome..... :)1

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • Posts: 7670
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #33 on: May 31, 2015, 04:41:31 PM »
Any update or do we just close out...

Offline Chalkie

  • Bronze Member
  • Posts: 76
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #34 on: June 01, 2015, 03:07:09 AM »
I have e-mailed them and they have failed to respond...I asked if they could rule out the possibility that the alleged infections could have come from other sites within iPage (they said part of the reason for suspending the account was to prevent infection spreading into other sites in a shared environment.

I linked to the s thread, as you suggested.

I will be starting a fresh support ticket with the unanswered questions and let you the outcome.

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • Posts: 7670
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #35 on: June 01, 2015, 04:54:42 AM »
Thanks for the update, let me know what happens with the new support ticket..

Kevin.... :t

Offline Chalkie

  • Bronze Member
  • Posts: 76
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #36 on: June 01, 2015, 08:24:46 AM »
HI Kevin

I received this reply from iPage. They didn't answer my question as to whether the infection could have come via files in a shared environment:

"Thanks for contacting support.  I sincerely apologize for any confusion this issue may be causing you. 

After checking a few files on your account, I would like to show you an example of malware injected into your files.  Please take a look at the code within the file located at '/wp-content/themes/expound/functions.php'.  The first 25-30 lines of the file you'll see a big box of what appears to be gibberish within a <php> tag.  This is what is known as "Base64 Malware".  I located this type of malware in all above mentioned 'functions.php' files, so I assure you that the malware examples on your account are in fact legitimate.  I'd also like to assure you that the antivirus application that we use for malware definitions/diagnosis is a trusted industry source. 

Generally code injection into files is achieved through security vulnerabilities in Wordpress core files, plugins, and themes.  It is imperative that you keep your website files for Wordpress up to date at all times to avoid exposing these vulnerabilities to hackers.  For more information about how to proceed after a Wordpress hack, see the below documentation from Wordpress Codex:

http://codex.wordpress.org/FAQ_My_site_was_hacked

If you'd prefer to get assistance with the cleaning of your site files, you can also purchase the Sitelock add-on to automatically fix infected site files.  For more information on Sitelock see the link below:

https://secure.ipage.com/product/sitelock/

Please let us know if you have any further questions.  Thanks!"

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • Posts: 7670
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #37 on: June 01, 2015, 10:08:20 AM »
If those guys say your website is hacked I cannot dispute that fact, also I have no experince with Website security. I guess you`ve just got to either follow their advice or reseach the issue yourself.
Have a look at the following link: https://blog.sucuri.net/2013/10/cleaning-up-your-wordpress-site-with-the-free-sucuri-plugin.html

That information is one of many available by doing basic searches in Google. (how to clean website files) that simple sentence searched with Google does find free tools and advice so is well worth researching further. The link I quote previously is outdated but the principle remains...

The links provided by iPage are well worth reading, especially this one:

http://codex.wordpress.org/FAQ_My_site_was_hacked

Your own system is clean, so if that is where the website hack originated from at least some progress has been made....

Take care and surf safe,

Kevin


Offline Chalkie

  • Bronze Member
  • Posts: 76
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #38 on: June 01, 2015, 01:27:19 PM »
Thanks again, Kevin.

Offline kevinf80

  • Malware Removal Staff
  • Diamond Member
  • Posts: 7670
Re: [Resolved - K] Malware infections stopping spyware form working?
« Reply #39 on: June 01, 2015, 03:03:05 PM »
Since this issue appears to be resolved the topic has been closed. Glad we could help..... :t 

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

The fixes and advice in this thread are for this System only. Do not apply the instructions from this thread to your own System. Please start a new thread describing your issue and someone will be along to assist you.