Ads Malware

Steve anssari

Steve anssari

Junior Member
Joined
Feb 25, 2017
Messages
103
Reaction score
14
Hi all. I ran a security check on my site after I suspected I got infected by malware from bidvertiser. buy the scan was negative but I still get redirects from old ads network. I deleted all my WordPress and started from scratch but that did'not help. I've contacted my host provider they told me you would pay 100$ to check the problem . and honestly I can't afford it. any suggestions? thanks
 
Advertise on BHW
You sure it’s your site and not your computer?

Check from another computer first, to confirm where the issue is.

Then report back here :-)
 
davids355 said:
You sure it’s your site and not your computer?

Check from another computer first, to confirm where the issue is.

Then report back here :)
Click to expand...
I checked about 4 devices with deferent internet connection . but it was the same
 
ausoma said:
install wordfence
Click to expand...
I downloaded the plugin but it didn't give anything. this is how the ads show up (i signed up with info links)
Untitled-4.jpg
 
Is it possible that it's a cacheing issue? What's your hosting provider? I had a similar issue with infolinks once, freaked me out as well. Eventually after removing their script from my site their ads....disappeared magically.
 
imustbebored said:
Is it possible that it's a cacheing issue? What's your hosting provider? I had a similar issue with infolinks once, freaked me out as well. Eventually after removing their script from my site their ads....disappeared magically.
Click to expand...
I purged all cache . i had an account with bidvertiser.com before i signed up for infolinks. thier redirects are showing on infolinks ads .
 
ausoma said:
oh well. Sorry mate, i don't know what to do then :/

Maybe contact infolinks.

EDIT: What hosting are you using? Your hosting may inject ads into ur website
Click to expand...
ipage
 
Steve anssari said:
Hi all. I ran a security check on my site after I suspected I got infected by malware from bidvertiser. buy the scan was negative but I still get redirects from old ads network. I deleted all my WordPress and started from scratch but that did'not help. I've contacted my host provider they told me you would pay 100$ to check the problem . and honestly I can't afford it. any suggestions? thanks
Click to expand...
Try to make requests to your website through Burpsuite that will capture every request/response from and into your webserver and highlight anything upnormal that may you suspect
 
I found this block of code inserted in the website html source code, which clearly states that you have infolinks plugin installed
 

Attachments

  • Capture.PNG
    Capture.PNG
    12.2 KB · Views: 147
You have an ad code inserted in your site, in your footer php file which you can remove with editing footer.php directly from wordpress Editor, it might also be a plugin that injects the code even if its deleted as well so as mentioned above you should try disabling your plugins one by one and see if the ads still appear.

If all else fails you can send me your site details and i can check it for you.

Also 100$ for a security sweep ? Really ?
 
Last edited:
1st change your Cpanel password to stronger one. (do not share with anyone for any reason)
2nd Change your WordPress password to stronger one.
3rd make full backup from your cpanel account and download and scan using premium anti virus software. If it's showing nothing any problem
4th steps Check your WordPress with latest versions.
5th remove not using plugins and make sure your all plugins are updated
6th use Word fence and configure correctly. and change protection type to real time protection ( they help to prevent attacks on your WordPress account )
7th Clear your all browser cache and flush dns from your computer. and reboot the router and check again.

I hope everything will be fine :)
 
thanks all for greate tips i contacted bidvertiser.com .and they informed me this. ''dear publisher. I believe this is coming from infolinks, they embed ads directly into key words on your website. We sometimes use this service." all fingers point to infolinks.
 
Steve anssari said:
thanks all for greate tips i contacted bidvertiser.com .and they informed me this. ''dear publisher. I believe this is coming from infolinks, they embed ads directly into key words on your website. We sometimes use this service." all fingers point to infolinks.
Click to expand...

Why havent you removed the code by now ? if its malicious ?
 
virtualpurity said:
Why havent you removed the code by now ? if its malicious ?
Click to expand...
honestly i 'm frustrated of search for new network . . i'm waiting for infolink support to check this problem first if they don't sort it out . i'll have to search for another one.
 
Steve anssari said:
honestly i 'm frustrated of search for new network . . i'm waiting for infolink support to check this problem first if they don't sort it out . i'll have to search for another one.
Click to expand...

It's simple.

Temporarily disable the ads. All of them.

Reload and see. If the problem is gone, then it's not malware. If it remains, then your template or database are infected.
 
Which theme are you using for WP? If you downloaded a nulled script then it might be it, the nulled scripts are loaded malware scripts.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top