Hey guys,

Its a website on wordpress (php) the script is edited some times and some php codes like for contact purpose has been added. But it never shown any errors before. Now whenever I visit the website or any of the pages of this website (free press release) my computer's mcafee antivirus showing a trojan removed alert. Is it harmful ? what could be wrong with the website? How this can be removed? Will php codes can be harmful with trojans?

Thanks. But please help/advice me.

Avast come up clean.

PHP code never gets to the browser, so probably some javascript causing a "false positive"

Originally Posted by chrishirst

Avast come up clean.

PHP code never gets to the browser, so probably some javascript causing a "false positive"

Actually the first time I have cleaned the cpanel and reinstalled the site. But unfortunately today its again showing the same alert. how can Identify the error (place)??

Do I have to re-install again??

Thank you very much for your reply!


.

Update:

Hello Chrishirst, you were very correct. I checked the w3c validator and found that a %DFSDF%DFDF like js script error. So checked the entire blog and found the 'shi**t' inside my sidebar widget just below google ads. But how can a user without admin rights put this script inside my blog?

Please share your knowledge, I'm confused and worrying about it. Coz the site is doing well and is having 1000+ posts. If again i have to do installation....

But how can a user without admin rights put this script inside my blog?

Weak passwords, security holes in "plugins" (which give the "infiltrator" the same access as the website "user"