The social counter and booster plugin from the last update has a file folder with eastobuy is this virur or back door???
Not on my site running 1.7.
Both folders clean
If you downloaded the theme from a “warez” site they often have malware.
If you bought the theme from ThemeForest, and you look at the installer on your hard drive and it has a virus you may need to scan your system, but also contact ThemeForest to double check the downloads are not infected in some way “all of a sudden” — when did you download the files?
If the virus is ON YOUR DOMAIN in those folders, your site may have been hacked. You should change all passwords, and delete and reinstall your WordPress files, delete and reinstall all plugins and themes RIGHT NOW.
None of our sites running these plugins have this issue.
Scan your site for other malware here
btw …
if running Windows I can HIGHLY recommend running malwarebytes anti-malware PRO on your PC.
it’s what we use in our office, highly recommended by top techs, maximum pc magazine, etc.
You can also try this anti-rootkit from malwarebytes:
https://www.malwarebytes.org/antirootkit/
(HIGHLY RECOMMENDED TO HELP RESCUE YOUR PC!)
I downloaded Newsmag update from ThemeForest and the only zip files with the eastobuy files are in the two plugins. These files are found in side the td-social-counter and td-speed-booster. Inside these folders there is a .git folder with an objects folder and within the objects folder there is there are several eastobuy type files. Again, they are only in these two plugins.
Weird. I don’t have those in my files anywhere.
Which folders and files by name specifically ? Curious.
Sure tagdiv will have reply.
Hi,
I’ve checked the package and there’s no virus, it must come from your side. Those git files which are present inside the plugins are used by our IDE application (phpstorm) and are not used by the plugin. It may also be a false positive. Envato also checks the files before approving any update so the chances for a virus to pass undetected are close to none.
Thank you, Emil G.
in the .git file folders there are several sub folders and inside them there are file with file type eastobuy. Are they supposed to be file type eastobuy? I have downloaded the files from theme forest on 3 different computers at 3 different locations, and they all have these file types eastobuy.
ON my Windows7/64 system they don’t have a file type of ‘eastobuy’ … but simply “file”
They also pass the malwarebytes anti-malware scan as not being malware files.
Hi,
I’ve downloaded the theme again to check the files and there’s no virus, the plugins come with the following files – http://screencast.com/t/QZQlMxK2 – http://screencast.com/t/BhuszySr
You can check the code on each one, it’s short, to see that there’s no malware/backdoor.
Thank you, Emil G.
