Title: Malware or not? Last modified: May 15, 2020 --- # Malware or not? * Resolved [gentle2309](https://wordpress.org/support/users/gentle2309/) * (@gentle2309) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/) * Malware or not? hello please I need help i ask a friend on internet install a theme for me ,after that i found this in my wordpress theme, Is it malware? * _[ Snip ]_ * here is the content of class.theme-modules.php * can you please help me to clean my theme please * _[ SNIP ]_ - This topic was modified 5 years, 12 months ago by [Yui](https://wordpress.org/support/users/fierevere/). - This topic was modified 5 years, 12 months ago by [Yui](https://wordpress.org/support/users/fierevere/). Reason: please use CODE button for code formatting - This topic was modified 5 years, 12 months ago by [Yui](https://wordpress.org/support/users/fierevere/). - This topic was modified 5 years, 12 months ago by [Jan Dembowski](https://wordpress.org/support/users/jdembowski/). Viewing 12 replies - 1 through 12 (of 12 total) * Moderator [Yui](https://wordpress.org/support/users/fierevere/) * (@fierevere) * 永子 * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12838672) * Its something that displays ads on your site. * You can get over several thousand good and safe themes here: [https://wordpress.org/themes/](https://wordpress.org/themes/) * dont use junk you can find all over the internet. Its unsafe approach. * Check this too: [the recommended security measures](https://wordpress.org/support/article/hardening-wordpress/) * Thread Starter [gentle2309](https://wordpress.org/support/users/gentle2309/) * (@gentle2309) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12838760) * thank you Yui , actually, he told me that he bought a premium WordPress theme and added hem as admin to get the ability to install the theme , i discovered that my website is too slow so i started checking in between files and i found that , i really appreciate your help * Moderator [Yui](https://wordpress.org/support/users/fierevere/) * (@fierevere) * 永子 * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12838828) * If you are a newbie with WordPress, it is best to start with something from official theme repo, [https://wordpress.org/themes/](https://wordpress.org/themes/) or even a default preinstalled theme. You can learn things and have a (almost*) bug free experience. * Later when you understand what exactly you want to get from your site you can look for other themes, plugins to expand site features. Maybe a paid theme can be a good choice (most premium themes have their free lite sibling, to try). * In any case, you should get paid theme from verified vendors, who include money- back possibility and technical support for their product. * Some vendors listed here [https://wordpress.org/themes/commercial/](https://wordpress.org/themes/commercial/) ThemeForest seems to be a safe place to buy themes too. * [Carike](https://wordpress.org/support/users/carike/) * (@carike) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12838851) * Mmm. Uninstalling the theme may not actually be enough to get rid of this, unfortunately. You may want to check your list of active plugins and ensure that you remove anything that is not supposed to be there. You may also want to deregister all of the options created by the code. * Thread Starter [gentle2309](https://wordpress.org/support/users/gentle2309/) * (@gentle2309) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12838893) * Thank you so much Yui for your help and your time , you were very polite and helpful * Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/) * (@jdembowski) * Forum Moderator and Brute Squad * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12838993) * > Malware or not? * Malware. As stated above you need to delouse your site. I have removed the code from your post as these forums are not for trying to fix infected themes. There’s just no point as that theme is loaded with many back doors. * _*Drinks coffee*_ * The person who told you they “bought a premium WordPress theme and added hem as admin to get the ability to install the theme” owes you a massive apology as that’s certainly how your site is now under new management and not yours. * Thread Starter [gentle2309](https://wordpress.org/support/users/gentle2309/) * (@gentle2309) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12838997) * Thank you Carike for your answer , theme is beautiful i like it but unfortunately i doubt that there are malicious codes , is there any way to clean the theme frome malicious codes please * [Carike](https://wordpress.org/support/users/carike/) * (@carike) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12839001) * If you have a backup from before you installed the theme, please consider restoring it. It will likely take you a lot less time to re-create any content than it will to make sure all traces of that thing is gone. * Alternatively, audit every file in your directory, as well as every entry in your MySQL table. * Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/) * (@jdembowski) * Forum Moderator and Brute Squad * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12839093) * > is there any way to clean the theme frome malicious codes please * Please stop this. * _*More coffee, so good*_ * You did an amazingly unwise thing. You’re using a theme that you should not be using and aside from helping you delouse your infected site, _please do not try and use these forums to support an amazingly unwise thing you did._ * As an example: you need a car. Your “friend” gets you one that looks nice, seats many and drives fast. Now you’ve found out that 1. The car has no brakes 2. The steering fails every 90 seconds 3. The owner of the car wants to talk to you and your “friend” 4. You’ve already been hurt trying to drive the car 5. People trying to help you says that the car is smoking 6. **The car is in fact on fire and is now igniting your house** * and you’re saying “the car is beautiful, can you help me with the driver’s door?” * Please stop. Lose that theme and delouse your site. * Moderator [Yui](https://wordpress.org/support/users/fierevere/) * (@fierevere) * 永子 * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12839107) * > any way to clean the theme frome malicious codes * The best way to clean this theme is to get rid of it. Completely. And the best way to do so – restore a backup, files and database. * Thread Starter [gentle2309](https://wordpress.org/support/users/gentle2309/) * (@gentle2309) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12839130) * Thank you Yui, I’ll do that, I apologize for wasting your time. - This reply was modified 5 years, 12 months ago by [gentle2309](https://wordpress.org/support/users/gentle2309/). * [Carike](https://wordpress.org/support/users/carike/) * (@carike) * [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12839155) * You did not waste our time. The only reason why we are being so insistent on you restoring a backup from before you installed the theme is because we have very, very good reason for it after reading the code. It does some very, very bad things and creates the capability of doing more. Like Jan said, you are no longer in control of your site. Viewing 12 replies - 1 through 12 (of 12 total) The topic ‘Malware or not?’ is closed to new replies. ## Tags * [firewall](https://wordpress.org/support/topic-tag/firewall/) * [scan](https://wordpress.org/support/topic-tag/scan/) * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) * 12 replies * 4 participants * Last reply from: [Carike](https://wordpress.org/support/users/carike/) * Last activity: [5 years, 12 months ago](https://wordpress.org/support/topic/malware-or-not-2/#post-12839155) * Status: resolved ## Topics ### Topics with no replies ### Non-support topics ### Resolved topics ### Unresolved topics ### All topics