WordPress.org

1. Andersss
   Member
   Posted 4 months ago #
   

   Hi,
   I have a problem: Sometimes visitors get redirected to a spamsite (online-dating service) when they navigate on my site. I figured it's some kind of malicious code hidden somewhere in my theme-files but I can't find it. Anyone know how to remove this? Thanks!

2. WPyogi
   Volunteer Moderator
   Posted 4 months ago #
   

   Have you tried deactivating all your plugins - it's possible one is causing that. Or you may have been hacked -- these may be helpful in that area:

   http://codex.wordpress.org/FAQ_My_site_was_hacked
   http://wordpress.org/support/topic/268083#post-1065779
   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
   http://ottopress.com/2009/hacked-wordpress-backdoors/

   Additional Resources:
   http://sitecheck.sucuri.net/scanner/
   http://www.unmaskparasites.com/
   http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

3. Andersss
   Member
   Posted 4 months ago #
   

   Thank you for taking your time!

   I ran my site at http://www.unmaskparasites.com/ and found a suspicious javascript in header.php. After I removed it the problem is solved.

   I had installed several security plugins before but none had worked.

4. WPyogi
   Volunteer Moderator
   Posted 4 months ago #
   

   No, simply removing bad code may not prevent another hack - it does not address how the hacker got into your site. I'd suggest you go through the rest of the resources listed.

5. Andersss
   Member
   Posted 4 months ago #
   

   The thing is I got the theme from a suspect source, so I'm pretty sure it was delivered to me with the code already in the header.

Reply

You must log in to post.