• I have found a malicious script that seems to be “attached” to the All Pages button on the Admin Screen.

    When I select Pages — All pages, I am redirected to copywriterusa.com.
    This shows on my google as:
    https://www.cutclutternowstore.com

    I believe this is attached to the WP-Admin file as opposed to the Mazine Theme as it is reproduced when I change themes.

    Need help asap. I can also send you the entire section of script that I found.

    Thank you!!

Viewing 10 replies - 1 through 10 (of 10 total)
  • Thread Starter cutclutternow

    (@cutclutternow)

    I have been reading everything I can for the last 24 hours. Do you want the text that I have found?

    I think someone at WordPress will need to possibly delete my installation for cutclutternowstore.com to get rid of the code.

    My site was hacked and when I use the WP-ADMIN and select Pages, I am sent to a
    red screen redirecting me to the PurelyHosting hosted site named copywritersusa.

    I CANNOT ACCESS MY ALL PAGES PAGE. I was able to hover over the all pages link
    and was able to find the code noted below causing the redirect. I NEED THIS
    FIXED IMMEDIATELY. PLEASE HELP. I CAN BE REACHED AT [Telephone number removed – thse forums do not offer telephone support]. LYNN
    KENDROT

    Thread Starter cutclutternow

    (@cutclutternow)

    can you delete my phone number for my post. I am not seeing how to edit or delete.

    thank you.

    I think someone at WordPress will need to possibly delete my installation for cutclutternowstore.com to get rid of the code.

    wordpress.org distributes and documents the WordPress application but has no connection with any site running that software. You need to sort this out on your self-hosted site yourself. If you cannot manage it yourself using the links I provided above, consider hiring someone.

    I think you need someone professional to help you clean your website if you are reading the documentation and still not successful in cleaning your website.

    Else, you can start by scanning your Website using the Sucuri Free scanner and from their results, and the malware or problems they report, start searching on the internet about them.

    Thread Starter cutclutternow

    (@cutclutternow)

    I scanned the website and it comes up clean. I know the issue is imbedded but not exactly sure how to find the spot and delete it.

    I was able to view the script when I used Inspect Element on the All Pages link.

    Have you tried:

    – deactivating all plugins to see if this resolves the problem. If this works, re-activate the plugins one by one until you find the problematic plugin(s).

    – switching to the Twenty Eleven theme to rule out any theme-specific problems.

    resetting the plugins folder by FTP or PhpMyAdmin. Sometimes, an apparently inactive plugin can still cause problems.

    Thread Starter cutclutternow

    (@cutclutternow)

    I did deactive mazine theme and activated twenty eleven yesterday. Same issue. That is why I believe the structure, not the theme is the issue.

    My All Pages button is being redirected as shown.

    <!DOCTYPE html>
    <html xmlns=”http://www.w3.org/1999/xhtml&#8221; dir=”ltr”
    lang=”en-US”>
    <head>
    <meta http-equiv=”Content-Type” content=”text/html;
    charset=UTF-8″ />
    <title>Top Copywriters USA › Log In</title>
    <link rel=’stylesheet’ id=’wp-admin-css’

    When I go to my other website and look at the element for All Pages, I see references to Submenu and First Item Current. All Pages

    I need to access the wp-admin-css to delete the Top Copywriter redirect information.

    Did you try all of the steps I gave above?

    check the file index.php in your WordPress installation (in the root directory). If you disabled the theme and the problem persists, 99% the problem is in your index.php.

Viewing 10 replies - 1 through 10 (of 10 total)

The topic ‘Malicious script’ is closed to new replies.