virus in my amember php files

Discussion in 'Troubleshooting' started by langedoc, Apr 25, 2010.

  1. langedoc

    langedoc New Member

    Joined:
    Jun 30, 2007
    Messages:
    4
    I have detected a 61.4.82.212 virus or trojan in files admin/index.php, amember/login.php and possibly in all my amember php files.
    Every time I want to login in my site/amember/login.php to the protected area, a warning appears:
    Warning: Visiting this site may harm your computer.
    The website contains mecanicaplus.com 61.4.82.212 site, which appears to host malware, ie software that can harm your computer or can operate without your consent. Your computer can be infected just by visiting a site that hosts malware.
    If you want more information on problems related to these items, visit the diagnostic page of Google Safe Browsing for 61.4.82.212.
    Find out more about how to protect against malicious software online.

    I understand that visiting this site may harm my computer.
    My costumers will experience the same problem trying login to the protected zone, If you have any advice, or/and any removal procedure, I would appreciate it. PLEASE HELP!!!!
    thank you in advance
  2. thehpmc

    thehpmc Member

    Joined:
    Aug 24, 2006
    Messages:
    901
    aMember version?
  3. miso

    miso aMember Pro Customer

    Joined:
    Aug 22, 2006
    Messages:
    543
    Your host is infected somehow... and it ends up adding that code to your uploaded files.

    I'd move to another safer host (less prone to that issue) and upgrade your amember version.
  4. erwinvdb

    erwinvdb aMember Pro Customer

    Joined:
    Aug 30, 2007
    Messages:
    264
    Yep seems like they hacked into your account.
  5. langedoc

    langedoc New Member

    Joined:
    Jun 30, 2007
    Messages:
    4
    thanks for your comments, I will change my host provider.

Share This Page