Title: Help with javascript malware
Last modified: August 30, 2016

---

# Help with javascript malware

 *  [QT Luong](https://wordpress.org/support/users/qt-luong/)
 * (@qt-luong)
 * [11 years, 1 month ago](https://wordpress.org/support/topic/help-with-javascript-malware/)
 * Hackers have injected javascript malware into my WP installation.
 * When viewed with Safari, some code that includes data:text/html,<script>window.
   close();</script> is executed, and the browser is redirected to a page that displays
   a pop-up which reappears when closed. This pop-up contains an alarming message
   trying to get the user to call a phone number. When viewed in Chrome, a new tab
   is opened, which prompts the user to download some software.
 * I’ve installed and ran a number of malware scanners including Sucuri Security,
   WordFence, Quttera Web Malware Scanner, and Exploit Scanner. None of them found
   anything.
 * Any ideas ?

Viewing 1 replies (of 1 total)

 *  Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/)
 * (@jdembowski)
 * Forum Moderator and Brute Squad
 * [11 years, 1 month ago](https://wordpress.org/support/topic/help-with-javascript-malware/#post-6297017)
 * You need to start working your way through these resources:
    [http://codex.wordpress.org/FAQ_My_site_was_hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked)
   [http://wordpress.org/support/topic/268083#post-1065779](http://wordpress.org/support/topic/268083#post-1065779)
   [http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/](http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/)
   [http://ottopress.com/2009/hacked-wordpress-backdoors/](http://ottopress.com/2009/hacked-wordpress-backdoors/)
 * Additional Resources:
    [Hardening WordPress](http://codex.wordpress.org/Hardening_WordPress)
   [http://sitecheck.sucuri.net/scanner/](http://sitecheck.sucuri.net/scanner/) 
   [http://www.unmaskparasites.com/](http://www.unmaskparasites.com/) [http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html](http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html)
   [http://blog.sucuri.net/2010/07/understanding-and-cleaning-the-pharma-hack-on-wordpress.html](http://blog.sucuri.net/2010/07/understanding-and-cleaning-the-pharma-hack-on-wordpress.html)

Viewing 1 replies (of 1 total)

The topic ‘Help with javascript malware’ is closed to new replies.

## Tags

 * [javascript](https://wordpress.org/support/topic-tag/javascript/)
 * [scanner](https://wordpress.org/support/topic-tag/scanner/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 1 reply
 * 2 participants
 * Last reply from: [Jan Dembowski](https://wordpress.org/support/users/jdembowski/)
 * Last activity: [11 years, 1 month ago](https://wordpress.org/support/topic/help-with-javascript-malware/#post-6297017)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics