WordPress Redirect Virus?

Resolved daltontastic
(@daltontastic)

9 years, 8 months ago

My WordPress site at epicmc.us was experiencing no problems until I updated to 3.9.2 but now it’s redirecting to an external site on occasion. It will redirect you to some weird YouTube video of Justin Bieber playing basketball or something (https://www.youtube.com/watch?v=RFngSCaY5nA).

I tried contacting GoDaddy Support and they are usually awesome, but they basically told me it’s my own fault for not purchasing SiteLock premium from them.

I payed like $70 on SSL and I always use secure FTP while browsing my file system so I have no idea how this could have been transmitted. I’m not the best at coding but I did check my theme’s footer and header, my .htaccess, and my wp-config (and as far as I know there is nothing suspicious lurking there).

I have worked really hard on this site and I would be very appreciative if somebody gave me any suggestions as to how I can fix this. Also, some insight as to how my site could even be compromised like this?

Viewing 6 replies - 1 through 6 (of 6 total)

Nikhil Chavan
(@nikschavan)

9 years, 8 months ago

Can you post link to your site?

EDIT – got it, it’s in your message.

barnez
(@pidengmor)

9 years, 8 months ago

Sucuri site scan says that your site is clean: http://sitecheck.sucuri.net/results/epicmc.us

And when I visit the site I am not redirected to the YouTube page you mention.

Try installing Wordfence and scanning your wordpress/theme/plugin files against those held in the repository.

You could also try running an anti-virus/malware plugin such as Anti-Malware (Get Off Malicious Scripts

Also:
Has anyone else reported this redirect when visiting your site?
Is your local computer secure? You could try a remote scan with ESET online scanner.

Thread Starter daltontastic
(@daltontastic)

9 years, 8 months ago

Well the redirect was taking place on multiple devices at home like my PC and iPhone. I think I found the culprit.. It was a plugin from an untrustworthy source I think. It makes me feel a lot better knowing that nobody got into my database or admin or anything. It was my own fault for downloading an untrustworthy plugin. By untrustworthy I mean not from the WordPress.org repository.

barnez
(@pidengmor)

9 years, 8 months ago

Great that you were able to narrow it down to that plugin. If might be an idea to change your dashboard & database passwords as a precaution.

Thread Starter daltontastic
(@daltontastic)

9 years, 8 months ago

I have no idea how to change my database login credentials lol.. I have changed my main admin dashboard password though.

barnez
(@pidengmor)

9 years, 8 months ago

You can change the password through cPanel -> Databases -> MySQL Databases, and then in the wp-config.php file

http://wordpress.org/support/topic/changing-mysql-database-password?replies=7

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘WordPress Redirect Virus?’ is closed to new replies.

WordPress Redirect Virus?

Tags

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics