4 {{ upvoteCount | shortNum }}
4 {{ upvoteCount | shortNum }}

Viruses spreading to multiple servers?

by krull
3 replies
  • WEB DESIGN
    • |
Ok so there was this weird redirect thing called JS:Redirector-MK [Trj added to my files. It was added to the end of a bunch of html files on my server. I have no idea how it happened.

I exported my sql database and the xml file from my wordpress, then reuploaded/reinstalled everything, so only the xml file and the sql database were used from my old server. Somehow, someway, my entire new server is infected with the exact same thing. So what gives? I have no idea how this is happening.

Could this possibly be where a virus is on my computer, and somehow it gets into my files whenever I upload something, no matter what it is? Because i didn't upload any html or php files or anything to my new server.
#multiple #servers #spreading #viruses
  • Profile picture of the author Istvan Horvath
    If it's a WP site (and nothing else besides) there is not html files at all. The output is "html" but you don't have any HTML files in WordPress.

    Yes, it is possible to have a virus/malware on your own computer that is using your FTP connection to spread.

    There are also 'animals' that are injected in the database (search MySQL injection).

    You didn't mention what you did with your wp-content folder, where your themes, plugins and uploads are/were.
    That's another possible source of re-infection: in the theme files; or hidden in the uploads directory...


    Just out of curiousity: if you know how to backup the database, why do you need the xml file, too?
    Signature

    {{ DiscussionBoard.errors[5277980].message }}
    • Profile picture of the author krull
      For some reason when I restored the sql database, my posts weren't showing up as they should have, so I kept an xml just in case and restored that and everything was working again.

      I'm going to have to look into this a bit further, i have no idea what's going on.
      {{ DiscussionBoard.errors[5279374].message }}
  • Profile picture of the author RyanA4D
    Are you using the same passwords for ftp on both servers?
    {{ DiscussionBoard.errors[5279561].message }}

Trending Topics