Jump to content

Trojan alert


Guy
 Share

Recommended Posts

Not sure what is happening .I have been subscribed to "The Real News Network" for many years and recently my ESET antivirus shows up every time I try to open this web site stating that they have blocked the entry due to a trojan .The web site is delivered to my email account but even if I try to open the web site on line the same message .

This first started with the site display on my screen all to one side of my screen , no way to correct.

I have tried to alert the web site of same to no avail .Is the site possibly down or / and anyone openning this website without antivirus protection downloading a trojan ?

Any comments would be appreciated

trojan alert20180218.jpg

Link to comment
Share on other sites

Appears the web site server has an infected WordPress plug-in: https://blog.sucuri.net/2015/03/inverted-wordpress-trojan.html . You can contact them to check out their web site. Also the malware is not exclusive to WordPress:

Quote

I should mention that although this malware is supposed to work on WordPress sites (WP-specific brute-force protection, paths and filenames, ability to generate doorways using current WP-theme, etc.) it will work just as well on other PHP sites that use index.php as a default index file.

 

Edited by itman
Link to comment
Share on other sites

  • Administrators

I would recommend reading https://blog.sucuri.net/2017/02/joomla-security-pornography-spam-campaign-in-the-wild.html, especially the part

Joomla 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object-injection attacks and execute arbitrary PHP code via the HTTP user-agent header. It was first exploited in December 2015 and is still happening today.

If you have not updated your Joomla site since then, you are likely already compromised. We have a new guide on how to clean a hacked Joomla site that you can follow.

Link to comment
Share on other sites

Thank you .I do not have a web site and am not very knowledgeable in this world. I just serf the web with an interest in geopolitics especially .I comment on same when and if  I can contribute to the conversation .

Is it possible that my word press account is compromised?

Why is it that there is only one of the websites that I visit that is giving problems in the display on my screen > Website is   The Real News Network   .All others are coming through properly.

Confused.

Link to comment
Share on other sites

  • Administrators
2 minutes ago, Guy said:

Is it possible that my word press account is compromised?

It has nothing to do with your account since you wrote that you are not an owner of the website that was blocked. Simply the website you visited was compromised and an admin or owner of the website should clean it and take measures to prevent further reinfection. You as a person with no relation to the website cannot do anything about it but give a heads-up to admins of the website.

Link to comment
Share on other sites

Thank you Marcos .I have sent an email to them making them aware of this.I have not received any reply at this time so I don't even know if they have received it

and the phenomena is still the same as tried to connect this morning and the trojan message is displayed automatically indicating that my eset is working properly.

I am a novice in this world and I appreciate your help.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...