Frenzied
Senior Member
- Feb 16, 2016
- 1,010
- 726
Wow! Humbles me how nice the BHW community is
Thank you so much for the offer. I've PM'd two people, but if I still can't solve it by tomorrow, I'll message you if that's ok
Cheers BHW!
Frenzied
My Wordpress Site Got Hacked, Help!
- Thread starter Frenzied
- Start date
Wow! Humbles me how nice the BHW community is
Thank you so much for the offer. I've PM'd two people, but if I still can't solve it by tomorrow, I'll message you if that's ok
Cheers BHW!
Frenzied
JesusChrist123
Regular Member
- May 6, 2019
- 334
- 144
Try to disable the plugins. Nulled plugins are typically full of malware. You might have to sarcifice the plugins to gain back normal function. Its your call.
HostStage
Elite Member
- May 20, 2010
- 2,083
- 1,836
If you do not have a non compromised backup for this website, the solution is to export a XML of all your websites content (articles, categories), copy your wp-content directory (with images)
Recreate the website by not implementing what caused the issue (generally a nulled theme / plugins or a very non updated one), and import the XML.
It is some work and it isn't ideal but it would prevent the issue from being copied over the new website.
Recreate the website by not implementing what caused the issue (generally a nulled theme / plugins or a very non updated one), and import the XML.
It is some work and it isn't ideal but it would prevent the issue from being copied over the new website.
- Mar 30, 2018
- 12,092
- 14,357
1) use your cPanel and see if you can install wordfence, if not ask them to clean it for you or use HAF to do it. Secondly remove hacked plugin from your site
Hi! I also have this problem today. The reason was a record in the database of my site. It was "wp_options -> siteurl - https://ws.stivenfernando.com/s.js?tra" . This post redirected to another site. I replaced the value with the address of my site. It worked. I hope I helped solve your problem.
Veil123
Elite Member
- Jun 13, 2012
- 1,839
- 3,357
That was the actual problem indeed. It took me a while to find that as I first thought the problem/malware is within the wordpress files. I have also suggested him to update all passwords including the one for the database.
So, guys, just a reminder: Don't use nulled themes and plugins downloaded from unknown and untrusted sources.
Forest Code
BANNED
- Apr 18, 2020
- 458
- 103
that's why i never use nulled themes
- Mar 21, 2013
- 24,780
- 31,561
Can you give us a short post-mortem so others will know what you did? No specifics, of course, just the overall course of action? Similar issues pop up time and again.
Veil123
Elite Member
- Jun 13, 2012
- 1,839
- 3,357
Hey bart, the explanation is here: https://www.blackhatworld.com/seo/my-wordpress-site-got-hacked-help.1222934/page-2#post-13106749
- Mar 21, 2013
- 24,780
- 31,561
What was the nulled theme/plugin? Can we download it somewhere to check its source?
Veil123
Elite Member
- Jun 13, 2012
- 1,839
- 3,357
Frenzied had lots of plugins and themes and half of those were nulled as far as I as could see. Didn't have the time to go through all of them, I just told him to remove/delete all of those elements.
Frenzied
Senior Member
- Feb 16, 2016
- 1,010
- 726
Some old elementor pro my friend sent me.
SocialMediaNetwork
Regular Member
- Jan 24, 2019
- 491
- 253
Can you also check the file of the gramcreator bot on your website because trying to download it and my pc says the file is daugerous file normally i did not get that message when downloading your file.
Frenzied
Senior Member
- Feb 16, 2016
- 1,010
- 726
Can you also check the file of the gramcreator bot on your website because trying to download it and my pc says the file is daugerous file normally i did not get that message when downloading your file.
Hi,
Don’t worry about that, it’s a false positive.
This was not on the gramcreator website. I’ll be securing my second server anyhow.
Best,
Frenzied
TrendWatchersAlerts
Regular Member
- Feb 20, 2020
- 381
- 274
Thank you OP for his post. Will be securing my site now.
Ioana.madalina
Junior Member
- Apr 2, 2020
- 102
- 109
Another lesson learned here....No Nulled stuff on the money site. *Noted*