Help Virus? JS:HideLink-A [Trj]

Viruses and worms
1

Hi, I have had 2 clients with Avast get a Trojan or virus warning on my site. My friend is getting this: JS:HideLink-A [Trj]. No one else including godaddy, various servers, and scanners are picking this up. I am being told that this is a false positive. Is there code I can delete or what else can I do to resolve this? I’m not very code literate but capable.

hxtp://energytothepoint.com/

AVAST MESSAGE:
Infection:JS:HideLink-A [Trj]

Barbara

2

Theres a lot of javascript malcode: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fenergytothepoint.com%2F
But not blacklisted on Virustotal: https://www.virustotal.com/en/url/d0c876715dc79f7de7760eda1dd7b38df9863283a9c37ed72f9b43ca26c8f61c/analysis/1393527153/

Please break the link to the website, cause its infected.

3

html scan
https://www.virustotal.com/en/file/3e71021f851d2ca80694d17c8a1f16ca5b65c9f04014d5118804c60b02e7779e/analysis/1393527860/

code_sample
https://www.virustotal.com/en/file/371930199c4e340e75820d0a85b877f0fd69f4bc89aace727b484acb30df9414/analysis/1393527878/

HideMe spam http://blog.sucuri.net/?s=hideme+spam

4

First thing to do is updating to the latest WordPress version.

http://zulu.zscaler.com/submission/show/9918a9363558dec1dbae6afaf9968aa1-1393527214
http://sitecheck2.sucuri.net/results/energytothepoint.com

There has been malware on the same ASN in the past:
http://urlquery.net/report.php?id=9692665

5

Thanks everyone. I got someone to clean up my site for me and it seems fine now. Barbara

6

Couldn’t you heal your own site yourself?
Sorry, couldn’t resist that one. ;D

But seriously, it looks o.k. now.
Don’t forget to update WordPress when a new version is released.
Because you where using a old version it was possible to insert the SEO malware.