Site hacked

Resolved thecornerofexcellence
(@thecornerofexcellence)

5 years, 6 months ago

My site seems to have been hacked.
I can access the homepage or any post for example with the direct link. But if I try to visit another post or section of the website a spammy ad shows up.
The virus seems to be this adware virus CAPITAL2RICH-SENSE67.XYZ according to this website https://regrunreanimator.com/newvirus/guide-how-to/remove-capital2rich-sense67-xyz-virus.htm

If you click to any other part of the website you get redirected to different external websites for example this one https://bestwinexperience.com/ or even a false Amazon ad like this
https://mine-divisioncolony72.biz/5268435855/?u=bt1k60t&o=xqt63qn&t=cid:3800&cid=3800-6266-20210226161301334d8a&f=1&sid=t3~fzzmt1stv00loqpdudtc4tdf&fp=EaXuyPiRJH5JUpd3SVZZdmz7XBY2PLEF5g8SWyMl04wVdENFm8k0NPjoEFXEqYzogW5aGJeuR77EeHj2GXqnBOQ88CHncIIOUhVH9GytrPqkabUUtgzcV2oJU%2FOE%2FDD4zDajBp5vYAgJkRQbapHNk5%2BGayBfpCoEcd5yITK7%2FQ4%2FFbm9%2FYS%2B5sQOOOpch87VIr0s%2FXkYWYXZvM3nLP%2FR8yjD8KZKRmh%2FRv1nZYnCUs7r9f16AqFIYssY%2B7%2FQi%2FCZZCGNTuyIAAdiyHTIR1a922DZY9wblHt3nMMebXrc6xpaLyTKPTfoy5VlZfJJwhMho9pTXAfdUqpCGYjOkPHs%2FGYp9bvZPwlfVIDfCp%2BUNdTyMSxLIwHGJJRjt0D89r%2F3%2FX1AzvIGh9mjmBpORzjPkR18AdExt4VRGgAUglOg42fwjYW1u6NRG%2BalReZarWyU%2Ff8y09fH5U4aLoHtrjCuQbyrDaRDJ8nN1J6GQnrv7H6Hy6oWdEVxshuW9Hyf%2BMEMjPzk9ZFyvRqIt47mGS5TXKcbwSo4FIVXjok3miObcFbeTKeZKnTSCe1J31SCCDbbDFJOlyeD4XthT48iqzxycIsC93Nxlb6eV95bsZyRAZQlAazEDBqDvd%2F%2B2Nnv3IFE5RegOCLF3u3cqv%2FDAGxdzrbq%2Fu8i2j4Lq7nSf%2BxOl02KPTZaswTQpAdrj%2BuQ8jy2TezNQZq%2BZvHKcP%2F47MkQtDEKZ4VyFRp80SMiW%2BF2SMDwc7fa8ciDujQoiM%2FaOagwxhpTkX4SXynGvmo22FhJFc%2BlFd8q7Hg5QCNWdGJQrCs8zY432wpB%2FZt71%2FuMW9jzSmgmnDb%2BvSEfDWexmsVkNV8%2FeN5RQ1vFWyNBV4Mv3xHdeyoD4g9mf8h%2F8nVniSN7pzvFby7d0GgnCB9380Ytq8k3vfK3Ye3XmsJLIOhiRnNfvmNEDSeP0vcoqCpRYQgj5HHGNL0a4Q0ICRX3cbmEPGjbDxfmDR76GaUIU00LhNHFofJ4%2BGQ0LLncaYJlrPPCD7alq6hMputLZyGYU%2FrtWZN18lhMS0RWJAMnLgRj6CVn3Jl7GqhXO2uN6LrRavk7QiRhhngMlotuxiR0%2BoS3B5qLd4vGM5C5Pg1NTZHc75K70%2FIu0wuwheNwLJl14VHgSyRyYMqQNPtWrPa17ivqTSLxA2guHgCaJwdnuPEAFE01TgMj1tS1yn%2BmFLSCCxY%2FkNJ3cuGN3qDWGCy8LxBwVJ7k5gFUHT9KK5uR77JLKL4niSZ2p5xCu0n8hpwaB9cJoVTpMV63xIJWIT79%2BgnyIkZZzhej6kGbwrWqPWNPOu%2B9pH%2BJVgqf9jolLaCqNYGxf8RviIXzgOiJFjbiknD%2FTkrNcGP5ReIsRQZpEEUOHkCGTlCuGnsfpnJ8wnapYacqROHaQ15IogBxsIhrHwxjYXlmO0BaszsFcQsSz3bs3pACNyI5GSlXNXeJn%2BuD9lvU4J5sUpJz46NdmDbOBbpY34mTY2ZGpKy4pDuwfkHvu%2BE%3D

I have tried with different browsers and devices to check that the problem is not my web browser but my website.

The page I need help with: [log in to see the link]

Viewing 9 replies - 1 through 9 (of 9 total)

Plugin Support amagsumov
(@amagsumov)

5 years, 6 months ago

Hello, @thecornerofexcellence

I recommend you to check your website for malware. You can try to install our Security plugin and run malware scanner.

Security plugin installation manual:
https://cleantalk.org/help/install-wordpress-security

Malware Scanner manual:
https://cleantalk.org/help/security-malware-scanner

Let me know if you have questions.

Thread Starter thecornerofexcellence
(@thecornerofexcellence)

5 years, 6 months ago

Dear @amagsumov,
I installed the security plugin this week and it has not found anything. That is why I wrote you.

Plugin Support amagsumov
(@amagsumov)

5 years, 6 months ago

Unfortunately no one can give 100% hacker-proof solution. Any outdated plugin, theme or FTP account could be the reason of the hacked website.

We recommend to launch the scanner one more time. The guide is here:
https://cleantalk.org/help/security-malware-scanner

Best regards.

Thread Starter thecornerofexcellence
(@thecornerofexcellence)

5 years, 6 months ago

I run 2 more scans and still get no result. What else can I do to fix this?

Plugin Support amagsumov
(@amagsumov)

5 years, 6 months ago

If the Malware Scanner couldn’t find any malware at your website, I can recommend you to to hire a third-party service to clean your website.

Thank you.

Thread Starter thecornerofexcellence
(@thecornerofexcellence)

5 years, 6 months ago

I did a scan with Malware which has detected a hacked file, but without upgrading to the paid version I cannot see details of the file or clean the site. And I am already paying you.

Thread Starter thecornerofexcellence
(@thecornerofexcellence)

5 years, 6 months ago

I do not understand why you cannot help me. I have even told which virus it seems to be, so you should be able to update your malware scanner. As I said, another scanner has detected it.
I am very unhappy right now with the service and if I do not get help from you with this, I shall seriously consider cancelling the Antispam and security service (which I renewed only in December for 4 years, adding the Security service) and ask for return of money and get a service that works.
Plugin Support amagsumov
(@amagsumov)

5 years, 6 months ago
As Malware Scanner can’t find the malware at your website, the further investigation may require some of your personal info. Please, create a ticket in our support system:
https://cleantalk.org/my/support/open
- This reply was modified 5 years, 6 months ago by amagsumov.
Thread Starter thecornerofexcellence
(@thecornerofexcellence)

5 years, 6 months ago

Thank you. Support ticket opened.

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Site hacked’ is closed to new replies.