Wordpress URL redirect hack, how to resolve? Suggest Me!!

CrazyAnimal

CrazyAnimal

Junior Member
Joined
Jun 2, 2014
Messages
126
Reaction score
27
Hello,

Need your support. Here my website homepage has been affected from "URL redirect hack" (other pages are working fine)

Untitled-1.jpg


I cross check all the files, And the found this code in index page, I removed the code and then i try it shows same redirect issue. :( How to solve this issue??

[vc_row][vc_column width="1/1"][vc_empty_space height="32px"][/vc_column][/vc_row][vc_row][vc_column width="1/2"][vc_raw_html]JTNDdGFibGUlMjB3aWR0aCUzRCUyMjEwMCUyNSUyMiUyMGJvcmRlciUzRCUyMjAlMjIlMjBjZWxsc3BhY2luZyUzRCUyMjAlMjIlMjBjZWxscGFkZGluZyUzRCUyMjAlMjIlMjBzdHlsZSUzRCUyMmJvcmRlciUzQW5vbmUlM0IlMjIlM0UlMEElMjAlMjAlM0N0ciUzRSUwQSUyMCUyMCUyMCUyMCUzQ3RkJTIwd2lkdGglM0QlMjI0OSUyNSUyMiUzRSUzQ2ltZyUyMHNyYyUzRCUyMmh0dHAlM0ElMkYlMkZ3d3cuZml2ZXB2ZW50dXJlLmNvbSUyRndwLWNvbnRlbnQlMkZ1cGxvYWRzJTJGMjAxNSUyRjExJTJGdHJhbnNmb3JtaW5nVGh1bS0xMS5qcGclMjIlMjB3aWR0aCUzRCUyMjI5OCUyMiUyMGhlaWdodCUzRCUyMjE3NyUyMiUyMCUyRiUzRSUzQyUyRnRkJTNFJTBBJTIwJTIwJTIwJTIwJTNDdGQlMjB3aWR0aCUzRCUyMjUxJTI1JTIyJTIwYWxpZ24lM0QlMjJjZW50ZXIlMjIlMjB2YWxpZ24lM0QlMjJtaWRkbGUlMjIlM0UlM0NoNCUyMHN0eWxlJTNEJTIyJTBBJTIwJTIwJTIwJTIwcGFkZGluZy1sZWZ0JTNBJTIwNXB4JTNCJTBBJTIyJTNFJTNDYSUyMHN0eWxlJTNEJTIyY29sb3IlM0ElMjAlMjM1ZDlhYjIlM0IlMjIlMjBocmVmJTNEJTIyaHR0cCUzQSUyRiUyRnd3dy5maXZlcHZlbnR1cmUuY29tJTJGYWJvdXQtZml2ZSUyRiUyMiUzRVRyYW5zZm9ybWluZyUyMFZpbGxhZ2VzLi4uJTIwJTNDaSUyMGNsYXNzJTNEJTIyaWNvbi1yaWdodC1vcGVuJTIwdGhlbWVjb2xvciUyMiUzRSUzQyUyRmklM0UlM0MlMkZhJTNFJTNDJTJGaDQlM0UlM0MlMkZ0ZCUzRSUwQSUyMCUyMCUzQyUyRnRyJTNFJTBBJTNDJTJGdGFibGUlM0UlMEE=

[/vc_raw_html][/vc_column][vc_column width="1/2"][vc_raw_html]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

Anybody facing this issue, please share your suggestions. Thanks
 
Advertise on BHW
try this plugin All in one WP Security and contact your hosting provider
 
Greymist said:
try this plugin All in one WP Security and contact your hosting provider
Click to expand...

Already i used the security plugin "Wordfence Security", After scanned our website is not open, so i have deactivate this plugin.
Let me try "All In One WP Security & Firewall" and let you know. Thanks for your help.
 
Have you used a nulled theme or anything ?
 
Check your .htaccess file. I had one like this that I couldn't figure out for the life of me. It was a redirect within the htaccess file but the sneaky buggers had put it way down the bottom of the file so I had to scroll down quite a bit to find it.
 
The code you see is Visual Composer code. Do you use VC on your site?
 
looks like you used nulled theme or plugin
 
MisterF said:
Have you used a nulled theme or anything ?
Click to expand...

Unfodos said:
looks like you used nulled theme or plugin
Click to expand...

YES, i am using nulled theme.

rubbishhorse said:
Check your .htaccess file. I had one like this that I couldn't figure out for the life of me. It was a redirect within the htaccess file but the sneaky buggers had put it way down the bottom of the file so I had to scroll down quite a bit to find it.
Click to expand...

Yes mate i already checked the .htacess, no malicious code.

incognitus said:
The code you see is Visual Composer code. Do you use VC on your site?
Click to expand...

YES i am using Visual Composer.

Buy Twitter Followers said:
i think this is a plugin script
Click to expand...

Mate, i found this code in pages only.


 
Unfodos said:
they can't provide any support because he use a nulled theme
Click to expand...
can help him to restore 1 day older backup. OP send me your effected URL. I can help you with sort it out too without restoring older backup.
 
aqibarif74 said:
can help him to restore 1 day older backup. OP send me your effected URL. I can help you with sort it out too without restoring older backup.
Click to expand...
i think OP want to remove the encrypted redirect script from the nulled theme .
if he want get rid of this problem he just simply remove the theme ^^
 
CrazyAnimal said:
YES, i am using nulled theme.
Click to expand...

And this is why you are fucked. Remove the theme, install default wordpress theme then run a wordfence scan.

Once you site is clean then add a NON Nulled theme, if you use nulled themes on money sites then you are asking for trouble.
 
aqibarif74 said:
Contact your hosting provider.
Click to expand...
I have already contacted the hosting provider regarding this issue. They said that, "From our end all works fine, better you check with your code".

Unfodos said:
they can't provide any support because he use a nulled theme
Click to expand...
Exactly said. You are 100% right.

aqibarif74 said:
can help him to restore 1 day older backup. OP send me your effected URL. I can help you with sort it out too without restoring older backup.
Click to expand...
Thanks for your support mate. I have restore the default wordpress theme & customize it. Since it tooks me around 3 to 4 hours. Now it works fine.

Unfodos said:
i think OP want to remove the encrypted redirect script from the nulled theme .
Click to expand...
Unfodos said:
if he want get rid of this problem he just simply remove the theme ^^
Click to expand...
I can't find the redirect script from the nulled theme, so i have replaced with the default wordpress. Now it works fine.

Asif WILSON Khan said:
And this is why you are fucked. Remove the theme, install default wordpress theme then run a wordfence scan.
Once you site is clean then add a NON Nulled theme, if you use nulled themes on money sites then you are asking for trouble.
Click to expand...
I completely agree with you mate. I removed the nulled theme and install the default wordpress & customize accordingly. Now it works fine and also i have restored all the plugins. Almost done..

Thanks for your Support..

 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top