Malware associated with my S2Member plugin

[cwiler]

I've checked my website for malware and hacks on: http://sitecheck.sucuri.net/scanner/. My site is clear until I install this S2Member plugin.

Every time I install this plugin on my website and I check it for malware or blacklisting I get this message: Malware found on javascript file:
http://www.inspiredadvantage.com/wp-con ... ABC=1&ver=111003-3546159587
Site error detected.
Details: http://sucuri.net/malware/php-error-fatal-error
<b>Fatal error</b>: Cannot redeclare counter_wordpress() (previously declared in /home/cwiler/InspiredAdvantage.com/wp-settings.php:302) in <b>/home/cwiler/InspiredAdvantage.com/wp-content/plugins/s2member/s2member-o.php(45) : eval()'d code</b> on line <b>233</b><br />

I've tried deleting the files from my FTP and then reinstalling the plugin, however, I keep getting this message when I check it. I've currently got the plugin UNInstalled so my site is clear.

Does anyone know what I can do to fix this?
Thanks!
Christina

[Eduan]

Have you tried using other malware and hacks scanner?
Something like an antivirus (NOD32 is good, has a trial) or ThreatFire (completely free).

P.S. I think it's just for business that they show an error.

[Cristián Lávaque]

Thanks for reporting this important issue, Christina! I'm forwarding it to Jason for review.

[Jason Caldwell]

Thanks for the heads up on this thread.

Hmm, I suspect that warning is issued because you have PHP "display_errors" enabled on your site. Malware scanners see this as a vulnerability. While it's good to see errors, it's not good for the public to see them. I would suggest that you edit your php.ini file to disable the display_errors configuration value. Please see the recommendation here: http://www.php.net/manual/en/errorfunc. ... lay-errors

Now, why are you getting this error in the first place?
Hmm, I'm not sure. The /s2member-o.php file is designed specifically to load ONLY the s2Member plugin into WordPress, so that your JS/CSS files are optimized even further. Are you running WordPress in a non-standardized location, through a symlink, or anything like that? If this problem continues, please send me a Dashboard login and we'll have a look-see.

Private Dashboard details can be sent through this private contact form:
http://www.s2member.com/contact/