Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #1137895
    Lily M
    Guest

    Hello,

    Greetings!

    Our of our client are facing issues with their website – https://sciencecitykolkata.org.in/, they are using the WordPress Theme – Enfold.

    View post on imgur.com

    Since April 2019, there is an issue when the website is being opened there is a Pop up showing on the Home Page. Their previous developers who had dveloped this website have left the job and are out of work.
    As we provide the hosting for them they have turned up to us and requested us to help them find a fix for this issue. We are a web hosting company and our external development persons have asked us to get in touch with you to get a solution for this issue.

    The audit report sent by the external developers is below –

    ****************************

    Dear Sir,

    Upon checking the site audit report, the issue we found that the website is affected with malware and because of this the website is showing the unwanted ads.
    On further checking found the presence of mobpushu and go.mobtrks malwares. Please check the files and remove the link from your end.

    ===================
    grep -irl “go.mob” .

    ./english/wp-includes/wp-tmp.php

    ./wp-includes/wp-tmp.php

    ./hindi/wp-includes/wp-tmp.php
    ===================

    1> http://sciencecitykolkata.org.in/genesis/

    <style>.MEOkFduPYI{position:absolute;top:-6000px;}</style><div class=”MEOkFduPYI”>download free theme</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>

    Malware entry: spam-seo.hidden_content

    <div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>

    <div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>

    <div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
    ne;”>

    <style>.dbhcc { dispLAy : NOnE } </style>
    <div class=dbhcc>

    <div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>

    <h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>

    <div style=”transform:translateX(-2047px);”>

    <p style=”color:transparent;”>

    <div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>

    JavaScript can also be used to manipulate with tag styles and their visibility

    <script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
    ————————————————————————————–

    2> https://sciencecitykolkata.org.in/contact-us/

    <style>.xWrRCFhBLG{position:absolute;top:-3000px;}</style><div class=”xWrRCFhBLG”>download premium free themes</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>

    Malware entry: spam-seo.hidden_content

    <div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>

    <div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>

    <div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
    ne;”>

    <style>.dbhcc { dispLAy : NOnE } </style>
    <div class=dbhcc>

    <div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>

    <h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>

    <div style=”transform:translateX(-2047px);”>

    <p style=”color:transparent;”>

    <div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>

    JavaScript can also be used to manipulate with tag styles and their visibility

    <script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
    ————————————————————————————–

    3> https://sciencecitykolkata.org.in/objective/

    <style>.UZQGEanslV{position:absolute;top:-3000px;}</style><div class=”UZQGEanslV”>premiumfreethemes</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>

    Malware entry: spam-seo.hidden_content

    <div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>

    <div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>

    <div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
    ne;”>

    <style>.dbhcc { dispLAy : NOnE } </style>
    <div class=dbhcc>

    <div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>

    <h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>

    <div style=”transform:translateX(-2047px);”>

    <p style=”color:transparent;”>

    <div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>

    JavaScript can also be used to manipulate with tag styles and their visibility

    <script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
    ————————————————————————————–

    4> https://sciencecitykolkata.org.in/the-team/

    <style>.NceprFPSAt{position:absolute;top:-2000px;}</style><div class=”NceprFPSAt”>themes free download</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
    Malware entry: spam-seo.hidden_content

    <div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>

    <div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>

    <div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
    ne;”>

    <style>.dbhcc { dispLAy : NOnE } </style>
    <div class=dbhcc>

    <div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>

    <h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>

    <div style=”transform:translateX(-2047px);”>

    <p style=”color:transparent;”>

    <div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>

    JavaScript can also be used to manipulate with tag styles and their visibility

    <script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
    ————————————————————————————–

    5> https://sciencecitykolkata.org.in/who-we-are/

    <style>.MEOkFduPYI{position:absolute;top:-6000px;}</style><div class=”MEOkFduPYI”>download free theme</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>

    Malware entry: spam-seo.hidden_content

    <div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>

    <div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>

    <div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
    ne;”>

    <style>.dbhcc { dispLAy : NOnE } </style>
    <div class=dbhcc>

    <div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>

    <h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>

    <div style=”transform:translateX(-2047px);”>

    <p style=”color:transparent;”>

    <div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>

    JavaScript can also be used to manipulate with tag styles and their visibility

    <script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
    ————————————————————————————–

    Hope this helps.


    Best Regards,
    SNT Developers
    ****************************

    Now the site is not resolving properly. As this website belongs to Ministry of Culture, Govt. of India and they have requested us to fix this issue so that the website runs smoothly without any issue, if this issue can be fixed then it would be great. what needs to be done to fix this issue ?

    I am providing you the screenshots below, kindly have a check.

    https://i.imgur.com/bepx45n.png – website

    https://i.imgur.com/gq5sk1t.png – popup 1

    https://i.imgur.com/KDSVQ1e.png – popup 2

    https://i.imgur.com/4Tijpyo.png – pop up 3

    https://i.imgur.com/KMFXUsI.png – malicious link

    https://i.imgur.com/K3MK6Rh.png – code

    https://i.imgur.com/99U62DP.png – code2

    I hope I am able to explain the issue. Looking forward to your response and a solution for this issue. Awaiting your reply…


    Best Wishes & Regards,
    Lily M.

    #1139333

    Hey Lily M,

    Thank you for sharing the details.

    For technical support please register here https://kriesi.at/support/register with your item purchase code .

    Go to https://kriesi.at/support/ select the theme you purchased bookmark the URL.

    Example: https://kriesi.at/support/enfold

    Scroll to the bottom of the page to open a new ticket.

    I have shared a few links in private content area please try to perform the steps and you can also try to contact your hosting company and ask them to run a scan on your files.

    Best regards,
    Vinay

    #1140712
    Lily M
    Guest

    Hello,

    We have already provided the purchase code and registered using the email address mentioned in the private content.

    We have not received any email with password to login yet. Please let us know how to proceed. Awaiting your reply.


    Best Wishes & Regards,
    Lily M.

    #1141592

    Hi Lily M,

    Best regards,
    Victoria

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.