58 jili slot withdrawal.REGISTER NOW GET FREE 888 PESOS REWARDS!

Finally got hacked :( Oh no!!!

bjwok — Tue, 15 May 2018 04:36:38 +0000

After almost 10 years with no issues here on WordPress I have finally been hacked My site showcases URL’s to all kinds of spammy sites on the homepage (at the top and scroll to the bottom) https://bjwok.com

I’m pretty keen to resolve this with the help of the community. Any assistance will be greatly appreciated!

Cheers!

Hack cleanup: Removed inserted plugins, still can't clean redirect

ddrevik — Tue, 01 Mar 2016 01:40:59 +0000

Had the joy of my first Content Injection hack this week. Needless to say, it’s been a nightmare to clean up.

Thanks to Wordfence, I found the guilty PHP that the hackers had installed that injected spammy content and redirects for google to find — which of course they did, which is how if found out.

Here’s a list of what I’ve done:
1) Installed Wordfence Premium, adjusted firewall settings and scanned repeatedly to delete two nasty PHPs, including one called compartmentalize-casements.php, which apparently is what pulled the spam from offsite.
2) Reinstalled pre-hack backup data, plugin and other files via UpdraftPlus.
3) Tested, tested and retested the site.

My problem? The site now doesn’t feed spam, and still runs fine to the viewer. But crawlers like googlebot and bing can’t see the pages or read my robots.txt files, because something is still installed trying to send them to the offsite spam-feeder.

Here’s a transcript from the Bingbot:

TTP/1.1 404 Not Found
Connection: Keep-Alive
Date: Mon, 29 Feb 2016 23:09:04 GMT
Keep-Alive: timeout=5, max=100
Content-Length: 413
Content-Type: text/html; charset=iso-8859-1
Server: Apache

404 Not Found

Not Found

The requested URL /compartmentalize-casements.php was not found on this server.

Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.

Apache Server at phineasswann.com Port 80

Anyone have any ideas of where I might find the code that’s generating this? I’m not a PHP programmer, so I don’t know if it might be somewhere in a CSS stylesheet or somewhere else.

Word fence scans are telling me I’m clean, but clearly there’s something still left behind that’s directing the crawlers away from the true page content.

https://www.ads-software.com/plugins/wordfence/

Will it work on this code?

Sherman — Sun, 21 Feb 2016 22:56:37 +0000

So a couple of weeks ago I was looking over my site and I found this odd javascript code at the bottom of the “contact us” page in my website. I tried looking to see where it was located, but I’ve had no luck so far. Thinking it was just related to that page, I deleted and re-added the page (after disabling and re-enabling my plugins). No luck.

Then the other day I decided to check all the pages, and sure enough, the code appears on all of them. This prompted me to check the footer.php file, but the code isn’t there either.

Here’s the code in question:

/*  -1  && (a.length > 28)){s='';j=27+ 1 + a.indexOf("/cdn-cgi/l/email-protection");if (a.length > j) {r=parseInt(a.substr(j,2),16);for(j+=2;a.length>j&&a.substr(j,1)!='X';j+=2){c=parseInt(a.substr(j,2),16)^r;s+=String.fromCharCode(c);}j+=1;s+=a.substr(j,a.length-j);}t.innerHTML=s.replace(//g,">");l[i].setAttribute("href","mailto:"+t.value);}}catch(e){}}}catch(e){}})();
/* ]]> */

The result is that when someone plugs information into the form, that information is erased (or sent somewhere else, which is even worse, since it could potentially capture private information), and the user is bumped back to the home page of the site.

So my question is, does this plugin work on code like this, and will it restore my site’s original functionality? I’d rather not download and install the plugin only to find out I’ve wasted my time.

Thanks.

https://www.ads-software.com/plugins/wordfence/

Site hacked

Hypper — Tue, 16 Feb 2016 06:14:33 +0000

Dear all,

My website went to a other site [removed] screen all of a sudden. My host put malware on all my files on the root. I’m trying to figure out, as a non expert, where and what the hell is ff’ing about with my website.

Any suggestions on how to tackle this? Is there a way for me Clean my site again

My site btw is: www.waftb.com it seams to work on a pc, not on a
apple phone

Hope you guys can shine light on this dark matter! Thanks in advance!

Claus

Admin Login using My Username from another country

SteveBimpson — Fri, 05 Feb 2016 16:05:18 +0000

Hi there,

I’ve had notifications on two of my clients’ websites to advise of an admin login, using my user account but from another country on a date and time that I didn’t login.

I’ve since checked the sites, carried out a Wordfence scan which identified an altered/unknown file in the theme, deleted it and then re-scanned to make sure that nothing else was found.

On one of the websites, I decided to add a new admin user account for me to use but when I tried to delete my original user account it led to a 500 error that affected all of the admin pages but not the front end of the site.

I haven’t tried this with the second site, as yet, but thought I’d ask here, first.

Any ideas as to what has happened and what I need to do about it?

Thanks in advance for any help.

Regards,

Steve Bimpson

https://www.ads-software.com/plugins/wordfence/

What to fix after possible hack

thedaner — Thu, 03 Dec 2015 18:52:53 +0000

Hi,

I’m sure this topic has been covered dozens of times, but–I’m quite sure a client of mine had one of his sites hacked and after doing regular security scans, we come up with nearly 200 potentially malicious files. I’ve been in touch with others about what to do and how to clean up, replace, delete etc. but I’ve only gotten so far.

One immediate question I have is: should there be ANY .php files in my uploads folder? If not, am I safe to delete?

Thanks in advance for your responses

Dane

Malicious code installed, can't access site

BuddyD — Sun, 21 Jun 2015 15:13:47 +0000

Hi, I am using the free version of Wordfence and have been notified of 3 malicious files that have been installed on one of my sites. I was able to delete two of the files using Wordfence but attempts to delete the third have not worked.

I cannot access the site now and am presented with a dialogue box asking me to choose a language when I visit the site URL.

The URL for the site is https://www.juneahrens.com.

The malicious file in question is described below.

###

File appears to be malicious: wp-config.php

Filename: wp-config.php
File type: Not a core, theme or plugin file.
Issue first detected: 10 hours 15 mins ago.
Severity: Critical
Status New

This file appears to be installed by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The text we found in this file that matches a known malicious file is: “\x65\x76\x61\x6C\x28”.

###

Any help would be greatly appreciated!

https://www.ads-software.com/plugins/wordfence/

unwanted php adcash popup on my site

yatendra22 — Fri, 01 May 2015 14:41:57 +0000

dear sir,

my site https://www.sarkarijobsresult.com

that showing unwanted popup and it’s address is “https://www.adcash.com/script/packcpm.php?r=36910”

this is a address that show when we click on my site any link and after some time this address redirect to another web address

so now please tell me some one how can face this problem

thank you

Am I hacked?

jjthexer — Tue, 26 Aug 2014 18:04:46 +0000

Hey everyone, I’ve recently noticed my site has started to become a complete headache. I’ve tried optimization after optimization and nothing seems to work. Meaning I’ve installed one plugin no dice so I uninstall and try another. I’m not continuously building plugins repetitively. My site used to load in about a second or 2. Now its more like 5 or 6. Even my wordpress dashboard takes a very long time to load. Nothing much has changed since when it was last working. I’ve updated some plugins which might be the case but maybe not?

Is there anyway you guys could point me in the right direction on this?

my site: https://www.simplefix.net funny because its an IT site for computer repair but I’m totally stumped. My google page speed insights shows 86/100 for desktop and 58/100 for mobile. https://developers.google.com/speed/pagespeed/insights/?url=http%3A%2F%2Fsimplefix.net&tab=mobile

Any ideas?

Thanks!

Will changing theme mess up site?

kristabrashear — Thu, 09 Jan 2014 16:10:10 +0000

I had my site hacked and everything is messed up on it. I am using the Twenty Fourteen theme. I inherited the site from someone else who managed it previously. The theme hasn’t been updated in a really long time and I think that’s how the attack happened. The hackers got in through a really old vulnerability (timthumb.php)….that was part of the theme files. Once I got back in, there where 11 plugins that were way out of date and wordpress itself was way out of date. I updated them all. The theme has been compromised and does not work….I have the site running under a default theme which works (but looks bad). The admin login works as well. I did not delete the original theme…..but it needs to be reinstalled / or updated before it will work again (and I don’t know what the previous guy may have modified in it). So will updating the theme mess up the site?