Malware Warning

[Kiki_2]

At one point we had some sort of malware in our forum, we paid someone to take care of it and it was all fine for a little while. About a month later, we started getting the warning again and we can't find someone to fix this issue for us. Does anyone know anything about this? Here is our website: www.digitalscrapcafe.com/forum

Thanks in advance!

[Hawk2]

what is the name of the malware if you know it. Have you talked to your host about this

[Kiki_2]

I am not sure what the name of the malware is. From everything I have looked at, it doesn't show that there really is malware, but we still get a warning when you go to the page. I haven't talked to my host, because in the past, they don't usually help with anything like that.

[Kiki_2]

I just talked to my host and they said they don't offer any support in this regard.

[Trevor Hannant]

I don't get a warning on your site - is it only on a specific page? Is it only some users or all? When you get the warning, what does it actually say?

[Kiki_2]

It's only on our forum and gallery page. It seems to be only some users. I don't get a warning, but my norton thing does say that it protected my computer from malware.

[VerifY]

I get this warning.. i think you need to upload and over right all your files.

[Hawk2]

norton lol

[Trevor Hannant]

Do a search in your database for 'finofalts' - does it come up with anything?

[Kiki_2]

I just looked and didn't find anything.

[beishe8]

I just looked and didn't find anything.

digitalscrapcafe.com
Summary

Norton Safe Web found no issues with this
site.

•Computer Threats:		0
•Identity Threats:		0
•Annoyance factors:		0
Total threats on this site:		0

[carolc]

Do a search in your database for 'finofalts' - does it come up with anything?

I have a very similar sort of issue. Some users see this issue with Chrome, but I can't reproduce it (and we verified we are using same version of Chrome). I checked post fields and signature fields, do you have any specific fields you suggest checking for the malicious site? {though I checked .ru and .pro since the name of the site seems to be different for everyone, but they all report the same extensions}

[Merjawy]

Check the site with this

http://sitecheck.sucuri.net

[carolc]

Thanks, Merjawy.

On the first tab (site check results), all items were okay.
On the last tab (blacklisting status), all sites checked it as 'clean'.

The only thing usual was on the 2nd tab (website details)

Web application version:
WordPress version: vBulletin 3.8.4
WordPress theme: http://{sitename}.com/wordpress/wp-content/themes/{themename}/
Wordpress internal path: /home/{mypath}/public_html/wordpress/wp-content/themes/{themename}/index.php