How to remove Exploit.PDF-JS.Gen in Windows Xp

[Vandam]

Hi all,

I am running windows XP in my PC. Yesterday, My two wordpress blogs including got attacked by a virus Exploit.PDF-JS.Gen which injected a Javascript into many key php files. I do not know how to remove Exploit.PDF-JS.Gen form my computer. Please help.

[Steve123]

Each time you think that your wordpress blog is prompt any downloads, or you any strange behavior, right away neutralize your blog by disconnecting it from database . You need to change any thing like database password or name in wp-config.php and keep in mind that whatever you have changed. It is the solution for that Exploit.PDF-JS.Gen. Check it out and reply.

[Big Fish]

Habitually php files do not change by themselves in wordpress except you have made any changes in recent times. That means if you hunt for alteration files in recent times you will get the list of files which are customized includes php files that are modified by that virus. So may careful about this.

[Zachary]

You can follow the below steps to remove this virus.

# Press CTRL+F in your blog folder in Cuteftp.
# Now clear that search filed if you got anything and gaze in must be to your root blog directory like in the above and make sure to tick ‘Search subfolders’ and ‘Date modified between’.
# Now put the gap in that dates in which time you think your site affected.
# Now strike “Search Now” button.
# It will show you catalog of files that have been customized in that interval of time.
# It also list the php files that have been tainted.
# After complete search, click on ‘type‘,
# Now open all files one by one using right click > edit
# Do that look for again .
# Now open any file, assume take wp-login.php > Now search it by pressing CTRL+F with keywords like iframe,document.cookie.
# If you initiate anything like that, you are fortunate and you got the virus. Remove that script in all affected files.

[Spyrus]

If you did not find anything, lets get a thorough look into one affected file. if you find any doubtful script or anything , there you go. You got the virus/hack. After deleting from every precious file. Undo the changes made in wp-config.php file to get back your blog online. It is superior to replace wp-admin folder with original one from your backup or unique script. Check that and reply.

[Snake08]

You need to download and install a Spyware Removal program of your selection. Once installation is complete, load the Spyware Removal Program and find the way to the scanning section. Most if not all Spyware Removal programs should offer you the preference to either do a smart scan or a full scan. Choose the full scan. Wait pending the scan is complete. It may take as much as an hour depending on how many records you have on your computer. Once the scan is complete, look from end to end each ‘threat’ which the spyware removal program detected and remove them without delay.