Posted 6 years ago #
This is not a wordpress specific question, so I hope you don't mind me posting it.
I run a wordpress site on my .com hosted domain. I have noticed (and a user has emailed me) that I am getting adware pop ups when go to my site. This has happened both on my home computer, and at work, so I think it is the site, and not my computer which is infected.
How does one go about cleaning spyware off a remote server?
Any help appreciated!
Posted 6 years ago #
nope no popups
Posted 6 years ago #
Hi again :)
You've got some ad-tracking / stats stuff in the footer for visitors ? Remove every bit of that, clear your cache and see what happens ?
(In Firefox, I see nothing. It looks very nasty in IE)
Posted 6 years ago #
I cannot see it again in IE.
This sort of thing has been reported before and it's been stats code that has been the cause, so disabling all that is the first step.
If you are using IE and your browser develops an unwelcome toolbar or behaviour afterwards, get HijackThis ( http://www.spywareinfo.com/~merijn/ ) and do exactly as it says.
its the web browser that would be infected by the code on the webserver.. so not everyone will see popups depending on their browser , os and settings
Posted 6 years ago #
Thanks for the help. Am I right in thinking then that when this sort of thing happens, it's any javascript in the index (ie stat counter, who's on my site right now etc) which can get 'infected'?
Just trying to understand - at the risk of sounding very dumb!
Hi Podz ;)
Posted 6 years ago #
I'm not infected - and I lowered my IE settings and kept trying too :)
Check your theme files.
Make sure none are chmod to anything greater than 666. If you do not alter them using the online editor, you can reduce that to 644.
Like estjohn says, the browser would be affected. It prompted me the first time to install some 'xxx' toolbar and although that would undoubtedly put crap into the computer it's main aim is to embed into IE.
If you are unsure, scan your machine with Spybot S&D, adaware and HijackThis.
This topic has been closed to new replies.
