-
AuthorPosts
-
September 13, 2019 at 10:22 am #1137895Lily MGuest
Hello,
Greetings!
Our of our client are facing issues with their website – https://sciencecitykolkata.org.in/, they are using the WordPress Theme – Enfold.
Since April 2019, there is an issue when the website is being opened there is a Pop up showing on the Home Page. Their previous developers who had dveloped this website have left the job and are out of work.
As we provide the hosting for them they have turned up to us and requested us to help them find a fix for this issue. We are a web hosting company and our external development persons have asked us to get in touch with you to get a solution for this issue.The audit report sent by the external developers is below –
****************************
Dear Sir,
Upon checking the site audit report, the issue we found that the website is affected with malware and because of this the website is showing the unwanted ads.
On further checking found the presence of mobpushu and go.mobtrks malwares. Please check the files and remove the link from your end.===================
grep -irl “go.mob” ../english/wp-includes/wp-tmp.php
./wp-includes/wp-tmp.php
./hindi/wp-includes/wp-tmp.php
===================1> http://sciencecitykolkata.org.in/genesis/
<style>.MEOkFduPYI{position:absolute;top:-6000px;}</style><div class=”MEOkFduPYI”>download free theme</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–2> https://sciencecitykolkata.org.in/contact-us/
<style>.xWrRCFhBLG{position:absolute;top:-3000px;}</style><div class=”xWrRCFhBLG”>download premium free themes</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–3> https://sciencecitykolkata.org.in/objective/
<style>.UZQGEanslV{position:absolute;top:-3000px;}</style><div class=”UZQGEanslV”>premiumfreethemes</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–4> https://sciencecitykolkata.org.in/the-team/
<style>.NceprFPSAt{position:absolute;top:-2000px;}</style><div class=”NceprFPSAt”>themes free download</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–5> https://sciencecitykolkata.org.in/who-we-are/
<style>.MEOkFduPYI{position:absolute;top:-6000px;}</style><div class=”MEOkFduPYI”>download free theme</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–Hope this helps.
—
Best Regards,
SNT Developers
****************************Now the site is not resolving properly. As this website belongs to Ministry of Culture, Govt. of India and they have requested us to fix this issue so that the website runs smoothly without any issue, if this issue can be fixed then it would be great. what needs to be done to fix this issue ?
I am providing you the screenshots below, kindly have a check.
https://i.imgur.com/bepx45n.png – website
https://i.imgur.com/gq5sk1t.png – popup 1
https://i.imgur.com/KDSVQ1e.png – popup 2
https://i.imgur.com/4Tijpyo.png – pop up 3
https://i.imgur.com/KMFXUsI.png – malicious link
https://i.imgur.com/K3MK6Rh.png – code
https://i.imgur.com/99U62DP.png – code2
I hope I am able to explain the issue. Looking forward to your response and a solution for this issue. Awaiting your reply…
—
Best Wishes & Regards,
Lily M.September 18, 2019 at 8:06 am #1139333Hey Lily M,
Thank you for sharing the details.
For technical support please register here https://kriesi.at/support/register with your item purchase code .
Go to https://kriesi.at/support/ select the theme you purchased bookmark the URL.
Example: https://kriesi.at/support/enfold
Scroll to the bottom of the page to open a new ticket.
I have shared a few links in private content area please try to perform the steps and you can also try to contact your hosting company and ask them to run a scan on your files.
Best regards,
VinaySeptember 22, 2019 at 7:20 pm #1140712Lily MGuestHello,
We have already provided the purchase code and registered using the email address mentioned in the private content.
We have not received any email with password to login yet. Please let us know how to proceed. Awaiting your reply.
—
Best Wishes & Regards,
Lily M.September 24, 2019 at 9:13 pm #1141592Hi Lily M,
Best regards,
Victoria -
AuthorPosts
- You must be logged in to reply to this topic.