Malware discovered using Microdata, Need Help!

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
CardOneConcepts
Joomla! Apprentice
Joomla! Apprentice
Posts: 6
Joined: Tue Nov 26, 2013 9:20 pm

Malware discovered using Microdata, Need Help!

Post by CardOneConcepts » Fri Jan 04, 2019 7:17 pm

Hello,

I am hoping someone can help me figure out how to remove some malware I discovered on my website?

I found on this page ( http://buildaramp.com/download-ramp-gui ... plans.html ) a missing graphic at the bottom of the page.
Screen Shot 2019-01-04 at 2.15.05 PM.png
When I use the browser inspector it reveals this code:
Screen Shot 2019-01-04 at 2.14.48 PM.png
I did some google searches and I think it has something to do with microdata, but this is beyond me and I have no clue as to where this malware is creeping in?

I do take several precautions like using Akeeba Admin tools but obviously that did not help in this situation.

if anyone has any input on where I could look to hunt this down and fix it I would appreciate it!
You do not have the required permissions to view the files attached to this post.

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Malware discovered using Microdata, Need Help!

Post by sozzled » Fri Jan 04, 2019 7:38 pm

The website URL used in the above post returns a 403 Forbidden error. I have never heard of microdata as a source of malware. That's not to say it can't happen but I think it's unusual if it could happen. What Google searches did you use to indicate that microdata could be a source of malware? It would be nice to see what you found so that we may have more information on this discussion topic.

Unable to comment based on information provided via screenshots only. If you are concerned about the possibility of malware being injected into your website, you may want to post the FPA report (see viewtopic.php?f=7&t=966324#p3550995 for instructions).

User avatar
abernyte
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4189
Joined: Fri May 15, 2009 2:01 pm
Location: Écosse - Scozia - Escocia - Škotija -स्कॉटलैंड

Re: Malware discovered using Microdata, Need Help!

Post by abernyte » Sat Jan 05, 2019 11:47 am

Why does Securi think this is a Wordpress site?
buildaramp.png
You do not have the required permissions to view the files attached to this post.
"Those who expect to reap the blessings of freedom must, like men, undergo the fatigue of supporting it." Thomas Paine

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20652
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: Malware discovered using Microdata, Need Help!

Post by leolam » Mon Jan 07, 2019 3:54 pm

@Abernyte :D :D :D

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20652
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: Malware discovered using Microdata, Need Help!

Post by leolam » Mon Jan 07, 2019 3:55 pm

sozzled wrote:
Fri Jan 04, 2019 7:38 pm
you may want to post the FPA report
Did not know this worked on a WP-site? :D

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -


Locked

Return to “Security in Joomla! 3.x”