Trojan

Hi!
I logged in on one friends wp pages on hes domain and my virussoftware started to warn me for virus:

Got this messaje:

http://xxxx-xxxx.se/wp-admin/load-scripts.php?c=1&load[]=hoverIntent,common,admin-bar,wp-ajax-response,jquery-color,wp-lists,quicktags,jquery-query,admin-comments,jquery-ui-core,jquery-&load[]=ui-widget,jquery-ui-mouse,jquery-ui-sortable,postbo|{deflate}
Infection: JS:Iframe-EPM [Trj]
Process: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

What should i do to get ride of it?

I wrote to the hoast to were his domain are…

What can and what should i do?

/Sanne

Removing the infection and updating JQuery would be a good start.

I dont know wich file i should remove…anyone who can help me with this???

Please!!!

First file to check is in the link you provided.

Run (online) scans to see where there are problems and what problems they are.

Can i do that with my avast or shold i choose something ealse?

If you have to ask things like that, you should hire someone who knows about security, websites, web-servers and such.

Had got so greate help from this forum before…please…anyone?

  • Remove the malicious code
  • Update JQuery
  • Run (online) scans to see what other problems there are and fix them.

Sorry…you talking words i do not now…im used to use computer, but not words like…malicious code…can you help me understand litle better?

Your best option is to hire someone who has the knowledge to get the site cleaned and safe.

If we should teach/explain everything to you first it will take at least 2 years to learn enough before you know enough to clean and protect the site yourself.

I understand that.

Do you think it best to empty all on the domain and install it again…do the virus dissaperer then or…? Can that be a way for me. Its not my own domain, so…

Infection: JS:Iframe-EPM [Trj]
Most likely related to this >> https://blog.sucuri.net/2015/11/jquery-min-php-malware-affects-thousands-of-websites.html

Sucuri can help for a fee https://sucuri.net/

Check website here https://sitecheck.sucuri.net/

Thanks so verry much!!!