Helpful with XSS scripting virus

  • I installed this to help cleanup bogus urls after I was hit by the xss cross-scripting vulnerability when I reviewed some spam comments. I tried various free external scanners and none of them found anything wrong. I also have the WP Security plugin but that doesn’t really do a virus scan as such, more of a file change notification. So i’ve been pulling my hair out as to where the unwanted pages were coming from given they weren’t in any obvious post or page.

    After installing this plugin and running a scan several urls were identified. I used the email to their live support option and they pointed out two wysijja files instantly which obviously weren’t meant to be there. Several other infected files have been found, primarily through the Wysijja plugin directory.
    Whilst I could probably clean it up myself having spent all morning
    I’ve paid for their pro-version and cleanup service so we’ll see how that goes. But so far it was the only scanner I tried that actually picked up problems even though it was obvious due to the fake url links I was getting!
    So fingers crossed their cleanup will work!

Viewing 1 replies (of 1 total)
  • Thread Starter lickthespoon

    (@lickthespoon)

    as an update I received the site cleanup report today and the fake url s are gone. They also manually cleaned some files and highlighted one potential issue I hadn’t spotted and wouldn’t be picked up by solely computer scanning.
    I paid the annual subscription fee for this and ongoing monitoring and cleanup.
    I think the benefit of this plugin is you can identify viruses that might be present with the free download. You then have to choose whether to cleanup yourself or get help. In my case having spent years building up good honest SEO it was devastating to find hacks that I couldn’t locate and would harm my business. So the fee for the paid version seems fair given the maturity of my site and potential loss of business – I’ve already lost all the hair!
    The paid cleanup service was easy to use turned around the next day and meant I didn’t have to wipe the site and reinstall.

Viewing 1 replies (of 1 total)
  • The topic ‘Helpful with XSS scripting virus’ is closed to new replies.