by ndesoo
21 replies
how to prevent malware attacks?.
I have a website at Hawkhost, but lately often get a malware attack. I've cleared it, but many times it happens. can anyone to help me for this problem?
please assist me. thanks.
#attacts #malware
  • Profile picture of the author JesseN
    What scripts are you using? Are you using any CMS like Wordpress or Drupal and is it updated to the latest release?
    {{ DiscussionBoard.errors[6461753].message }}
  • Profile picture of the author ndesoo
    i'm using wordpress latest version. I keep them updated.
    {{ DiscussionBoard.errors[6462045].message }}
  • Profile picture of the author JezWebb
    Likely that there is a doorway created by the hacker within your legitimate files. The only sure cure is to delete all files on the server, and replace them with a known good backup. Or install a fresh copy of WP, and rebuild your site.

    The alternative is a time consuming hunt through all the files on the server for the rogue code.
    Signature

    Web strategist and adventurer. Director of Search Engine Friendly Hosting. ---Fast, affordable, feature packed hosting from £1.97. --- Search Engine Friendly Web Hosting

    [VIDEO] How to set up a WordPress blog in under 10 minutes.

    {{ DiscussionBoard.errors[6465031].message }}
  • Profile picture of the author topnichewebsites
    Def its something hidding in a legimate file. We just cleared one moments ago for another WF member. Tracking it down is a whole other animal and very time consuming for most and normally more then 1 file. They are pesky...

    Suggestion by Jez is correct the fastest way is a do-over but there are way of doing quicker if you know what you are doing.
    Signature
    http://pixelcovers.com/ <- eBook add eCovers

    https://www.unicommercesolutions.com <- WordPress Websites and Maintenance
    {{ DiscussionBoard.errors[6465477].message }}
  • Profile picture of the author ndesoo
    every time there is an attack, I did a fresh install for all existing applications, even the theme I also replace with new. but it still happened again and again. I even frequent contact admin webhosting.

    I use Hawkhost, give me a review of Hawkhost
    {{ DiscussionBoard.errors[6466664].message }}
  • Keep the WP version updated and continually keep track of latest malware attacks and threts is the only way. But, after an infection, its really hard to find the infected files. So better prevent attacks before.
    Signature
    {{ DiscussionBoard.errors[6467024].message }}
  • Profile picture of the author topnichewebsites
    Points to the theme or plug-in you are using is probably your problem.
    Signature
    http://pixelcovers.com/ <- eBook add eCovers

    https://www.unicommercesolutions.com <- WordPress Websites and Maintenance
    {{ DiscussionBoard.errors[6467166].message }}
  • Profile picture of the author teguhyuliantos
    I think you should be ask to your hosting technical support. Or you can request additional security networking and also install antivirus special for website.
    {{ DiscussionBoard.errors[6467368].message }}
    • Profile picture of the author lindasofia
      Originally Posted by teguhyuliantos View Post

      I think you should be ask to your hosting technical support. Or you can request additional security networking and also install antivirus special for website.
      I agree with your. Really should go and complaint your hosting support. they provide you more secure services.
      {{ DiscussionBoard.errors[6725841].message }}
  • Profile picture of the author so11
    Hello,

    the reason you get hacked over and over is that you run vulnerable code or plugins on your site.

    1. Go over your permissions and make sure there are no accounts that you are not aware.
    2. Change your admin password.
    3. Security audit your site/blog with Web application security scanner.
    4. Correct identified problems.

    regards,

    so11
    Signature
    www.groupesoloviev.com
    We help businesses manage cyber risk and compliance requirements.
    {{ DiscussionBoard.errors[6470142].message }}
  • Profile picture of the author Janet Sawyer
    Go to this site here Sucuri SiteCheck - Free Website Malware Scanner
    Input your sites url - web address.
    You will then get a report that will highlight what malware is lurking on your site.
    {{ DiscussionBoard.errors[6470260].message }}
  • Profile picture of the author ReadByte
    What do you mean "malware attacts"? Do you mean your web server has been shelled (a tool uploaded by hackers to control the server)? What exactly occurs?
    {{ DiscussionBoard.errors[6470302].message }}
    • Profile picture of the author starlaadamz
      The attack is only possible if the attacker already has full administrative control of the target PC, but this is possible through a standard virus infection. You can protect your computer from malware attacks by installing best Antivirus software like AVG, Avast, Nortan, Immunet..etc but i would recommend you to instal Immunet Protect plus antivirus software.
      {{ DiscussionBoard.errors[6694579].message }}
  • Profile picture of the author jaasmit
    You need to install some security system in your site in order to avoid this type of situation.
    If you are using wordpress then you can do that by adding any plugins that will do that work.
    {{ DiscussionBoard.errors[6695648].message }}
  • Profile picture of the author vrtechnologies
    Hello,

    Malware always effected the main functions files.. it will add the malware script in all the files which will using a functions... and will not effected the database only files.

    So always take a precautions to remove the malware.
    1. First if you have a backup of the site that will be good otherwise you will take a backup of the site.
    2. remove the malware script that always added in function file some the like
    function(){
    eval('asdasd^&sadashj');
    }
    3. Then remove the all the files from server.
    4. Change the all the username/passwords like cpanel/FTP/Database.
    5. Re-upload the files and change the site admin username/password.

    That's it.
    If you want my help the PM me or contact me Via Skype/Gtalk: ashishkg17

    Thanks
    {{ DiscussionBoard.errors[6696087].message }}
  • Profile picture of the author aawebdev
    Regularly checking and upgrading your website is the best way to protect from malware.
    {{ DiscussionBoard.errors[6697544].message }}
  • Profile picture of the author andersvinther
    Sucuri.net are good for cleaning up your site... USD89 for one years subscription where they will clean your site every time it's infected...

    Also you can check the WordPress Security Checklist that I've written... should tighten up your site to prevent it from happening again... see The WordPress Security Checklist
    {{ DiscussionBoard.errors[6723423].message }}
  • Profile picture of the author bluebrain
    I've had the same problem with ALL 3 of my hosting.

    I've cleaned up the files, but they got infected again. The only thing that worked was changing the FTP pw.
    Signature
    Mine crypto coins not using graphics cards but by building gold mines in an online strategy game???
    [EASY $100 a month] How to make money playing GoldenTowns
    {{ DiscussionBoard.errors[6727751].message }}
  • Profile picture of the author bluebrain
    And don't forget to clean up your computer of trojans! I think the best is MalwareBytes, worked for me and it's also free!
    Signature
    Mine crypto coins not using graphics cards but by building gold mines in an online strategy game???
    [EASY $100 a month] How to make money playing GoldenTowns
    {{ DiscussionBoard.errors[6727854].message }}
  • Profile picture of the author Devone
    I have read this yesterday here from another guy seems this Malware attaks are popping up these days.

    I hope you can fix your Problems!
    {{ DiscussionBoard.errors[6727934].message }}

Trending Topics