Title: deepjava's Replies | WordPress.org

---

# deepjava

  [  ](https://wordpress.org/support/users/deepjava/)

 *   [Profile](https://wordpress.org/support/users/deepjava/)
 *   [Topics Started](https://wordpress.org/support/users/deepjava/topics/)
 *   [Replies Created](https://wordpress.org/support/users/deepjava/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/deepjava/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/deepjava/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/deepjava/engagements/)
 *   [Favorites](https://wordpress.org/support/users/deepjava/favorites/)

 Search replies:

## Forum Replies Created

Viewing 3 replies - 1 through 3 (of 3 total)

 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [the latest WordPress 2.9.2 has been hacked by the eval(base64_decode](https://wordpress.org/support/topic/the-latest-wordpress-292-has-been-hacked-by-the-evalbase64_decode/)
 *  [deepjava](https://wordpress.org/support/users/deepjava/)
 * (@deepjava)
 * [16 years ago](https://wordpress.org/support/topic/the-latest-wordpress-292-has-been-hacked-by-the-evalbase64_decode/#post-1484988)
 * Hey,
    There is no need to install wordpress.
 * You can actually fix this by installing Trinetra PHP antivirus.
    This antivirus
   works on WordPress 2.9.2 version beyond. Easy to understand reports and cleaning
   process. Even layman can run this. Nothing technical to be done here. No need
   to go to unix console/SSH or telnet. Your site will be virus free in few minutes.
 * [http://www.deepjava.com/Trinetra_Ninoplas_Base64_PHP_Virus_Remover.jsp](http://www.deepjava.com/Trinetra_Ninoplas_Base64_PHP_Virus_Remover.jsp)
 * Best part of Trinetra Antivirus is that it is FREE and available with source 
   code.
 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [wordpress virus scan](https://wordpress.org/support/topic/wordpress-virus-scan/)
 *  [deepjava](https://wordpress.org/support/users/deepjava/)
 * (@deepjava)
 * [16 years ago](https://wordpress.org/support/topic/wordpress-virus-scan/#post-1386618)
 * please check this code which fixes Ninoplas Base64 encoded virus.
    Most of the
   php viruses modified initial segment of the code and added eval and base64_decode
   functions. Trinetra antivirus scans for such occurrence. Cleaner is provided 
   as separate program which helps you clean all such files if found infected. Trinetra
   is the fastest ninoplas virus scanner and remover.
 * [http://www.deepjava.com/Trinetra_Ninoplas_Base64_PHP_Virus_Remover.jsp](http://www.deepjava.com/Trinetra_Ninoplas_Base64_PHP_Virus_Remover.jsp)
 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [WordPress hacked](https://wordpress.org/support/topic/wordpress-hacked-5/)
 *  [deepjava](https://wordpress.org/support/users/deepjava/)
 * (@deepjava)
 * [16 years, 9 months ago](https://wordpress.org/support/topic/wordpress-hacked-5/page/2/#post-1049426)
 * I think it is not wordpress code but some trojan on windows machine which keeps
   a watch on your network layer and scans all communication.
 * I could figure out this when i asked for ftp log from hosting service provider.
   My login details were available from all over the world and even while i was 
   sleeping 🙁
 * What to do when your website is infected with such iframe malware
    ==========
   ============================================ 1. Immediately change your ftp passwords.
   2. Clean up your local machine from all the viruses, trojans, malware, rootkits
   etc. 3. Install good antivirus with updates and firewall with limited ports open.
   4. do netstat to keep a watch on invalid trojan operation running in background.
   5. Hope you have backup of your site. If yes then login to your website and delete
   all the content. 6. if you do not have backup download all the files from your
   website and scan for iframes. Remove unwanted iframes or malware tags. 7. upload
   the correct copy of files to the server.

Viewing 3 replies - 1 through 3 (of 3 total)