Title: Browser button hijacked
Last modified: February 24, 2017

---

# Browser button hijacked

 *  [matarij](https://wordpress.org/support/users/matarij/)
 * (@matarij)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/)
 * When i go to my home page, if i press the back button it takes me to a spam site.
   Has anyone else got this problem? Need help. Word fence scan not picking anything
   up.
    -  This topic was modified 9 years, 3 months ago by [matarij](https://wordpress.org/support/users/matarij/).

Viewing 7 replies - 1 through 7 (of 7 total)

 *  [ptj_11](https://wordpress.org/support/users/ptj_11/)
 * (@ptj_11)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8843890)
 * Try cleanig our browser cache, and then try again.
    /ptj_11
 *  [bluebearmedia](https://wordpress.org/support/users/bluebearmedia/)
 * (@bluebearmedia)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8844029)
 * This is nothing Wordfence would have anything to do with, or be able to control!
 *  Thread Starter [matarij](https://wordpress.org/support/users/matarij/)
 * (@matarij)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8844152)
 * Hi both
    Thank you for your replies.
 * Clearing the cache won’t help as it is replicated on all visitor’s browsers
 * My point about wordfence is it is not picking it up and I wondered if this is
   a new issue
 *  [ptj_11](https://wordpress.org/support/users/ptj_11/)
 * (@ptj_11)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8844197)
 * Could You tell me, what address the spamsite has?
    /ptj_11
 *  [ptj_11](https://wordpress.org/support/users/ptj_11/)
 * (@ptj_11)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8844338)
 * You could try this:
    Download a complete backup from your webhotel to your pc,
   then download and install this program- TotalCommander from here: [http://www.ghisler.com/](http://www.ghisler.com/)
 * Then use the Totalcommander option- “Find Text (Commands/Search/Find Text”, put
   in the address for the spam site and let it search through your backup.
    This
   might tell you, where to find the solution. /ptj_11
 *  Plugin Author [WFMattR](https://wordpress.org/support/users/wfmattr/)
 * (@wfmattr)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8846407)
 * Hi [@matarij](https://wordpress.org/support/users/matarij/),
 * Yes, this could be a new type — we’re constantly adding new signatures for malicious
   files, and new malicious files are being developed all the time. It is possible
   for malware to push a URL into the browser’s history, to cause the back-button
   behavior like this. It could be a javascript file or an inline script on the 
   page.
 * We have a guide for cleaning hacked sites here — some of the additional scan 
   options or other techniques may help find the malicious file:
    [How to clean a hacked website](https://www.wordfence.com/learn/how-to-clean-a-hacked-website/)
 * If you find a file by these methods, we accept malware samples at the email address
   samples (at) wordfence.com, to be analyzed and added to future scans.
 * -Matt R
 *  Thread Starter [matarij](https://wordpress.org/support/users/matarij/)
 * (@matarij)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8846967)
 * The site that the back button goes to is:
    [http://9jokers.com/calculated-af/4942.html](http://9jokers.com/calculated-af/4942.html)
 * Thank you Matt R – if I find the file I will certainly let you have it.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Browser button hijacked’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 7 replies
 * 4 participants
 * Last reply from: [matarij](https://wordpress.org/support/users/matarij/)
 * Last activity: [9 years, 3 months ago](https://wordpress.org/support/topic/browser-button-hijacked/#post-8846967)
 * Status: not resolved