Malware Embedded in Dzonia Script?

Hi

Our web hosting company has started sending us emails (the past few weeks) stating that during routine virus scans that they have detected malware in the our wordpress theme. The script that they are highlighting as being potentially harmful is this:

/home/linweb22/s/securityfirst.uk.com/user/htdocs/wp-includes/js/tinymce/themes/index.php

Can you please let me know whether this item is correct and should be there or whether it is somehow malware and should not be there?

Thank you in anticipation.

 

Hello,

Greetings from InkThemes!

You are kindly suggested to reinstall the theme from the members area..

Thanks & Regards!
Priyanka
InkThemes.com

 

Thanks for the reply. The "malware" alert was raised when we were using Dzonia Lite. We then upgraded and so the theme was freshly installed from the members area. We received the same alert again so is it likely to resolve the issue if I reinstall the theme?

I asked the hosting company whether their virus scan could be finding a "false positive" but they are being uselessly vague, so in the first instance can you please let me know whether this script is legitimate?

(/home/linweb22/s/securityfirst.uk.com/user/htdocs/wp-includes/js/tinymce/themes/index.php)

 

Hi,

Hope you are doing good...!

To determine and fix the issue, we need access to your dashboard and cPanel.

So, send us the following details at [email protected] along with the thread link.
Your Website URL:
WordPress Username:
Password :

C-Panel website URL: -
C-Panel Username: -
C-Panel Password: -

We will check everything from our end and will try to fix your issue ASAP.

Thanks & Regards!
Nitin
InkThemes.com

 

Email sent, thank you.

 

Thanks for the details..

We will get back to you soon..

Your patience will be appreciated,

Thanks & Regards!
Priyanka
InkThemes.com

 

Hi

We have experienced the same problem as last September - a scan made by our website hosting company has detected malware script in our website. I emailed you all our details and a request to investigate earlier this week (Tues 18th) but I have not heard back from yet. Can you please confirm you received the email and let us know if you will look at the issue as our site keeps being routinely suspended! Thank you.

 

Can you share more about you issue? Any error log file from hosting etc?

That will help us to track the error and will rectify it asap.