jakenelson09

Yes! I’m glad (well not glad) that you can see what I am talking about.

I am in the process of scanning with WordFence, but so far it is saying everything is clean.

Also, I switched themes to 2015, and the problem still persists. Does that mean the infection lies elsewhere in the wordpress install?

Once the scan is through telling me that everything is fine and dandy, I will go ahead and try the fresh wordpress install.

So I tried to comment out the CSS media queries for the phone media size, and the theme is still showing in mobile mode. Time to try something else.

Also just fyi to everyone out there: the site is redirecting to 5.moby24.com which then immediately redirects to googleframe.net where the malicious downloads try to take place.

I appreciate the replies!

@wslade I haven’t tried any server side plugins yet. I will look into that. Anything you might suggest?

@marvel Labs I think I may end up doing the same thing.

Does anyone know where WordPress decides whether to display the mobile site or the desktop version? (maybe a media query)?

Thanks Yogi, I have been poring through other posts where these resources have been mentioned.

The funny thing is that sucuri malware scan labels the site clean because it is not scanning the mobile version. I don’t know how to get it to scan it from an iphone point of view.

I guess what I am in search of is a “search all files in the directory” tool, perhaps I can find the malicious code that way? Any ideas?

Sorry, website is byuidahoradio.org. Problem only appears when accessing from mobile device. Cannot reproduce by making your browser phone size.

I am looking for this as well! Any luck?/bump