Help – Hacked Website ! – Malware injection

  • jeremycoincapital

    (@jeremycoincapital)


    8 years, 1 month ago

    Hello,

    Since some weeks, google marks our site as hacked in search result :

    Coin Capital : Achat et conseil en crypto-monnaies
    https://coincapital.fr/
    Il est possible que ce site ait été piraté.
    Coin Capital vous facilite l’achat de crypto-monnaies . Diversifiez vos placements avec nos portefeuilles. Profitez de l’expérience de nos spécialistes dans votre …

    Google shows those security issues :

    Security Issues
    Hacked with spam
    A hacker may have modified your site to contain spammy content. To protect visitors to your site, Google’s search results may label your site’s pages as hacked. We may also show an older, clean version of your site. Learn more
    URL injection
    These pages appear to be created by a hacker with the intent of spamming search results.
    Show details
    Sample URLs Last detected

    http://www.coincapital.fr/itvdrj/boavut.php?hfm=what-is-the-fbi 4/26/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=rct3-k-rides-downloads 5/2/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=velociraptor-speed-test 5/2/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=fruitflow-omega-3 5/2/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=bohemian-style-sofas 5/1/18
http://www.coincapital.fr/vh2e/pvaa6.php?lwv=dota-2-down 4/14/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=adresse-caf-paris-16 4/30/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=gsoap-onvif-tutorial 5/1/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=kpop-download-website 5/1/18
http://www.coincapital.fr/boniru/cowitjh.php?kur=html-validator-download 5/1/18

    I’m using Velux theme with basic extensions.
    I seems like i have an error message also, only visible with a robo crawling: Notice: Use of undefined constant HTTP_USER_AGENT – assumed ‘HTTP_USER_AGENT’ in /home/content/n3pnexwpnas04_data02/64/41501264/html/wp-content/themes/primer/header.php on line 35 Notice: Use of undefined constant HTTP_USER_AGENT – assumed ‘HTTP_USER_AGENT’ in /home/content/n3pnexwpnas04_data02/64/41501264/html/wp-content/themes/primer/header.php on line 35 1

    What can i do to clean my site ? I tried to call my registar for help, tey told me to install an anti-virus, but this doesn’t work. i can’t see the hacked page on my wordpress dashboard.

    Thank you for your help,
    JM

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    8 years, 1 month ago

    Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

    Thread Starter jeremycoincapital

    (@jeremycoincapital)

    8 years, 1 month ago

    Ok thanks a lot,

    Unfortunately, my site is corrupted since 1mounth +, and i can’t restore a “clean backup”.

    I tried already a lot of solutions, none of which worked. For exemple when i make an external scan, there is no problem. I also installed WordFence, all green.

    Is there a way to totaly reset the wordpress to start from a fresh installation ?

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    8 years, 1 month ago

    An external scan is useless. You need a host-based scanner like WordFence.

    If you don’t have a clean backup, follow the steps to remove and replace *all* .php files except wp-config.php (and be sure to manually review that one).

    Thread Starter jeremycoincapital

    (@jeremycoincapital)

    8 years, 1 month ago

    Ok,

    Thank you Steve for your fast response.

    I will look at the link you provided, thank you

    Have a good day,
    J

    te_taipo

    (@te_taipo)

    8 years, 1 month ago

    Once you have reset your website, you will need to take some time to figure out how it was that malware was able to be installed into your web files. This is important, because merely resetting the site does not necessarily prevent the attack repeating itself.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Help – Hacked Website ! – Malware injection’ is closed to new replies.

Tags