Malware affecting my SEO and Adwords

[creatorsaurabh001]

Hi, I started AdWords campaign for my website fees days back. For 7-8 days my ad was live but CTR was very low and suddenly yesterday my ad got disapproved by google. This was caused because of malware detected on my site. I don't know from where they came. Even I lost my rankings from position 20 to position 80+.

Is there any WordPress plugin or solution to remove malware? First where do I scan the website?

I have no problem to share my website link. But some members say that I am promoting my site. So for now I am not sharing the link.

 

[Lauren11]

Hey pm me your website I will take a look. Did you installed any nulled plugins? Are there any ourside non secure links such as js, css etc. I faced the same problem long ago I rectified it by removing outside links. Hit me a pm I will help you.

 

[amber dsuza]

use wp fancy plugin to remove malware

 

[creatorsaurabh001]

Thank you for Information, I will try it out now.

 

[Geasy]

I'm like 90% sure that you're affected with Malware by the theme you're using. If that's the case then go ahead import all posts, delete WordPress from cPanel, reinstall it, and use another theme which isn't nulled.

All nulled themes are hacked or they put some weird shit like that.

 

[creatorsaurabh001]

I'm like 90% sure that you're affected with Malware by the theme you're using. If that's the case then go ahead import all posts, delete WordPress from cPanel, reinstall it, and use another theme which isn't nulled.

All nulled themes are hacked or they put some weird shit like that.

I am using Divi theme and i have purchased it

 

[kn1ves]

Do you have any sort of security setup for your website?

 

[sam.hunt0710]

Hi, I started AdWords campaign for my website fees days back. For 7-8 days my ad was live but CTR was very low and suddenly yesterday my ad got disapproved by google. This was caused because of malware detected on my site. I don't know from where they came. Even I lost my rankings from position 20 to position 80+.

Is there any WordPress plugin or solution to remove malware? First where do I scan the website?

I have no problem to share my website link. But some members say that I am promoting my site. So for now I am not sharing the link.

If the website which you have mentioned in your homepage url is the same in your adwords accounts then there is some script in your WP code as when I am clicking on any inner pages its first redirecting me to any 3rd party offer and second click took me to the inner page .

You better remove all plugins 1 by 1 and try to figure out where is the problem .

or you can hire any freelancer from here or from upwork to get it done .

 

[BHKing777]

Most likely you are getting false positives. Do the following:

1. Contact G support and request to send you the infected URLs. If you see .js/.css/.jpg/.png/.ico files then most likely it's a false positive. From there go to steps 2+
2. Make sure that you uninstall all nulled plugins/themes (if you are using them). In case you really need a nulled plugin, make sure to get it from a reputable source or buy it.
3. Install and use cloudflare for your site /i.e update the name servers to the provided name servers by cloudflare.
4. Install a caching plugin if you don't already have one. I'd suggest to go with W3 Total Cache or WP Rocket.
5. If you are using W3 Total cache, just download and important the settings from here https://www.dropbox.com/s/7wywhbjemcn6fm0/w3 total cache settings march 2019.json?dl=0

6. This is the most important step: Configure your caching plugin with a CDN. I'd suggest to go with Cloudfront since it's the cheapest option, but you can use whatever you want. This will serve your 'infected' files from a CDN, so all the .js/.css/.jpg/.png/.ico files will no longer be infected.

7. Usually within 3 days if everything is configured properly, all ads will be automatically reactivated and you will no longer see a message for malware next to your ads. If this does not happen, contact G support as well with a request to send you a new report. From here:

1) Either there are no problems and they can manually activate your ads.
2) There might be some URLs left to take a look at and from there you have to take specific steps based on your particular case. I cannot help you further if you get stuck and i don't know what is the issue, so if you get stuck, feel free to PM me and i will take a look.

P.S: Additionally make sure that you don't have any 404 errors or redirection going on. Use GT metrix for further scanning.

Also, if you are using Google Tag Manager, make sure that you don't have any malware messages there as well.

 

[creatorsaurabh001]

Most likely you are getting false positives. Do the following:

1. Contact G support and request to send you the infected URLs. If you see .js/.css/.jpg/.png/.ico files then most likely it's a false positive. From there go to steps 2+
2. Make sure that you uninstall all nulled plugins/themes (if you are using them). In case you really need a nulled plugin, make sure to get it from a reputable source or buy it.
3. Install and use cloudflare for your site /i.e update the name servers to the provided name servers by cloudflare.
4. Install a caching plugin if you don't already have one. I'd suggest to go with W3 Total Cache or WP Rocket.
5. If you are using W3 Total cache, just download and important the settings from here https://www.dropbox.com/s/7wywhbjemcn6fm0/w3 total cache settings march 2019.json?dl=0

6. This is the most important step: Configure your caching plugin with a CDN. I'd suggest to go with Cloudfront since it's the cheapest option, but you can use whatever you want. This will serve your 'infected' files from a CDN, so all the .js/.css/.jpg/.png/.ico files will no longer be infected.

7. Usually within 3 days if everything is configured properly, all ads will be automatically reactivated and you will no longer see a message for malware next to your ads. If this does not happen, contact G support as well with a request to send you a new report. From here:

1) Either there are no problems and they can manually activate your ads.
2) There might be some URLs left to take a look at and from there you have to take specific steps based on your particular case. I cannot help you further if you get stuck and i don't know what is the issue, so if you get stuck, feel free to PM me and i will take a look.

P.S: Additionally make sure that you don't have any 404 errors or redirection going on. Use GT metrix for further scanning.

Also, if you are using Google Tag Manager, make sure that you don't have any malware messages there as well.

Hey man thank you for the information, Blackhatworld is like a awesome supporting family for me. Feeling like my home on this forum.

 

[creatorsaurabh001]

If the website which you have mentioned in your homepage url is the same in your adwords accounts then there is some script in your WP code as when I am clicking on any inner pages its first redirecting me to any 3rd party offer and second click took me to the inner page .

You better remove all plugins 1 by 1 and try to figure out where is the problem .

or you can hire any freelancer from here or from upwork to get it done .

Thank you for the information.