Code injection attack help – is iframe to google.com OK?

  • quetzalpie

    (@quetzalpie)


    11 years, 5 months ago

    So I host multiple WordPress sites, and recently got a notification that Google had blocked two of them due to a code injection (it was an iframe pointing to malware). I totally removed and reinstalled WordPress with a fresh database, and ran the URL through a malware scanner online.

    I re-scanned and now it does NOT come up with the original malware site in the iframe, but it DOES come up with an iframe with a source of http://google.com and claims that it’s malware. Is that malware? There’s no weird fishy URLs in the iframe at all.

    Is the site clean, or is an iframe to google.com still an indication of infection? I’m not familiar if that could be part of my theme, and I can’t seem to come up with anything in Google. Thank you!

Viewing 3 replies - 1 through 3 (of 3 total)
  • ftschumann

    (@ftschumann)

    11 years, 5 months ago

    You could try doing a scan with the plugin called Wordfence. Sometimes it can come back with a few false readings, but it’s usually a good indication.

    Thread Starter quetzalpie

    (@quetzalpie)

    11 years, 5 months ago

    Good idea, thanks. I was running iThemes Security and its “malware scanner” just tells me whether or not the site has been blacklisted, which is not helpful. I didn’t realize Wordfence was better. 🙂

    ftschumann

    (@ftschumann)

    11 years, 5 months ago

    Wordfence doesn’t tell you if you’re blacklisted, it simply scans all files to see if anything has been changed and if it suspects any malware. 🙂

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Code injection attack help – is iframe to google.com OK?’ is closed to new replies.

Tags