Microsoft Security Essentials identifies an .sql as a virus. Steps?

Following some broad hacking of my WordPress sites, I'm copying my theme and uploads folders and the databases to re-create the sites. One .sql, file, though, triggers a Microsoft Security Essentials flag, and won't download.

Can I take this as a true indication that there's hacked code in the WP database itself?
Can I trust MSE to identify if other .sql files have been similarly hacked?

The only site that has this issue is brand new, with almost no content to speak of. Since I generate content offline and cut/paste it into the posts, it's not a big deal to just nuke this particular site from space and restart. But I'm worried about my other databases now, and wondering if there's something in particular I should do to check them.

asked 10 Nov '13, 08:28

mattshepherd
45●4●17●30
accept rate: 0%

One Answer:

active answers oldest answers newest answers popular answers

Hello,

Not really, but you still are better off investigating the problem - if there is indeed some malicious code inserted in the database that will be a javascript piece of code that is to be displayed on your page(s) to infect visitors. You can dump all your tables one by one and then try downloading them separately to quickly narrow down your search (try with the wp_posts table first).
That actually depends on the results of the investigation you will have carried in 1. Any decent antivirus solution should detect such javascript infections in a web page so once you identify the offending code you will be able to run additional tests on it - perhaps using additional virus scanners, such as housecall.trendmicro.com, or cloudantivirus.com, and see which one fares best.

If you need more information then please contact us back here.

Sincerely,

Valentin I. WebFaction Support
--
WebFaction - Smarter web hosting
http://webfaction.com
http://twitter.com/webfaction - http://facebook.com/webfaction

permanent link

answered 10 Nov '13, 10:17

valentini
261●4
accept rate: 28%

Your answer

toggle preview

community wiki:

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Question tags:

wordpress ×244
database ×84
sql ×9
hacked ×5

question asked: 10 Nov '13, 08:28

question was seen: 1,868 times

last updated: 10 Nov '13, 10:17

Microsoft Security Essentials identifies an .sql as a virus. Steps?

Follow this question

Related questions