Piwik code reported as Malware

[Zerovic]

Hi there guys,

Suddenly, all my sites which had the Piwik code added before the tag are blocked due to code injection.

Google Webmasters tools says the following:

@Warning Google has detected harmful code on this site . We recommend that you act quickly to clean up your site. Failure to do so may lead to Google users seeing a warning when they attempt to visit pages on this site.

Type: Code Injection

@Suspected injected code <script type=\"text/javascript\"> var pkBaseURL = ((\"https:\" == document.location.protocol) ? \"https://stats.zerovic.com/\" : \"http://stats.zerovic.com/\"); document.write(unescape(\"%3Cscript src='\" + pkBaseURL + \"piw ik.js' type='text/javascript'%3E%3C/script%3E\")); </script>

did anyone have anything like this before?!

regards,
z

[matthieu (Matthieu Aubry)]

I’m afraid your server was hacked, eg. in http://stats.zerovic.com/piwik.js

you can see that someone added text at the bottom of the javascript file.

Can you please check all softwares installed on your server, what else is there? Maybe old wordpress or phpbb got hacked and Piwik was compromised as a result ?