avast detection

[koullis]

i keep getting this alert from avast for a site

js.redirector-h4 (trj)

any idea how to solve it...i think it has to do with some java files

thanks

koullis Reviewed by koullis on 18th May 2009. avast detection i keep getting this alert from avast for a site js.redirector-h4 (trj) any idea how to solve it...i think it has to do with some java files thanks Rating: 5

[Whoo]

If you are not the owner of the site or don't have FTP access then you will not be able to do anything without it. It's javascript code on the site, I had the same issue yesterday and I told the owner to remove the javascript and then it stopped giving me the alert.

[koullis]

im the owner of the site...its a wordpress style and i saw that every java files were modified this morning and i replaced it with an old backup...some files had an encyrpted command when i opened both to compare

[Whoo]

Then I suggest you start backing up your files and look for a shell, mostly a random named .php file that's bigger in size compared to the other files in your webfolder.

[koullis]

i made a backup and started to upgrading to latest version..is this going to fix the problem or it might have that file afterwards?


Edit: Found an unknown file in several locations..if anyone wants the file to decode it and check it and give me more details what can do let me know