Help me find script added by malicious coder (5 posts)

  1. ultramalcolm
    Posted 5 years ago #

    A funny thing happened. Google stopped sending me natural search traffic all of a sudden.

    I was using Google webmaster tools, and I started noticing all these porn-related keywords showing up for my site.

    Viewing the source and my theme's template files didn't reveal anything.

    However, when I used Google's tools to fetch the site as Googlebot, I saw the following at the bottom of the site:

    <span style='top:-3424px; left:-3033px; position: absolute; background-color:#583577;'><a href="http://www.fromaway.com/inr2-3some-2-blondes-video">3some 2 Blondes Video</a>.

    This is just an example. There are hundreds of these.

    Somehow, tons of porn links are getting added to the bottom of my site. Google saw this, and stopped sending me traffic.

    The trouble is, I can't track down where this code is getting inserted. Can anyone help?

  2. Rev. Voodoo
    Posted 5 years ago #

  3. ultramalcolm
    Posted 5 years ago #

    This is some awesome reading...thank you so much. In this case, I got lucky: upgrading to the newest version of WP seemed to do the trick. Thank you!

  4. Rev. Voodoo
    Posted 5 years ago #

    OK, now that you got it taken care of...harden it

    Change all passwords first. login, database (which will require wp-config.php to be edited), hosting, etc

    Then follow the hardening instructions, and maybe do some google-fu for more info

  5. ultramalcolm
    Posted 5 years ago #

    That's what I'm doing now. Thank you!

Topic Closed

This topic has been closed to new replies.

About this Topic


No tags yet.