-
AuthorPosts
-
October 24, 2019 at 10:25 am #1150807
Hello,
Greetings!
I had posted my issue earlier but faced issues with support login. Now I was able to login and providing the details of my issue below –
Our of our client are facing issues with their website – https://sciencecitykolkata.org.in/, they are using the WordPress Theme – Enfold.
Since April 2019, there is an issue when the website is being opened there is a Pop up showing on the Home Page. Their previous developers who had developed this website have left the job and are out of work.
As we provide the hosting for them they have turned up to us and requested us to help them find a fix for this issue. We are a web hosting company and our external development persons have asked us to get in touch with you to get a solution for this issue.The audit report sent by the external developers is below –
****************************
Dear Sir,
Upon checking the site audit report, the issue we found that the website is affected with malware and because of this the website is showing the unwanted ads.
On further checking found the presence of mobpushu and go.mobtrks malwares. Please check the files and remove the link from your end.===================
grep -irl “go.mob” ../english/wp-includes/wp-tmp.php
./wp-includes/wp-tmp.php
./hindi/wp-includes/wp-tmp.php
===================1> http://sciencecitykolkata.org.in/genesis/
<style>.MEOkFduPYI{position:absolute;top:-6000px;}</style><div class=”MEOkFduPYI”>download free theme</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–2> https://sciencecitykolkata.org.in/contact-us/
<style>.xWrRCFhBLG{position:absolute;top:-3000px;}</style><div class=”xWrRCFhBLG”>download premium free themes</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–3> https://sciencecitykolkata.org.in/objective/
<style>.UZQGEanslV{position:absolute;top:-3000px;}</style><div class=”UZQGEanslV”>premiumfreethemes</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–4> https://sciencecitykolkata.org.in/the-team/
<style>.NceprFPSAt{position:absolute;top:-2000px;}</style><div class=”NceprFPSAt”>themes free download</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–5> https://sciencecitykolkata.org.in/who-we-are/
<style>.MEOkFduPYI{position:absolute;top:-6000px;}</style><div class=”MEOkFduPYI”>download free theme</div></div></div></div><!– close content main div –> <!– section close by builder template –> </div><!–end builder template–></div><!– close default .container_wrap element –> <div class=’container_wrap footer_color’ id=’footer’>
Malware entry: spam-seo.hidden_content
<div style=”position:absolute; left:-200%; top:-200%;cursor:default;” id=”fb-friends-list”>
…
<div style=”position: absolute; overflow: hidden; width: 2px; height: 1px; left: -288; top: -277; z-index: 177;”>
…
<div id=”Leyout101″ style=”text-indent: -26529px; width: 0px; height: 0px; color: #ffffff; font-size: 0.1px; display: no
ne;”>
…
<style>.dbhcc { dispLAy : NOnE } </style>
<div class=dbhcc>
…
<div style=”position: absolute; top:-20px; width:100%; height:20px; text-align:center;”>
…
<h2 style=”overflow: auto; position: fixed; height: 0pt; width: 0pt;”>
…
<div style=”transform:translateX(-2047px);”>
…
<p style=”color:transparent;”>
…
<div style=”position: absolute; filter: alpha(opacity=0); opacity: 0.001; z-index: 10;”>JavaScript can also be used to manipulate with tag styles and their visibility
<script type=”text/javascript”>document .write(“<div style=’height:1px; width:1px; overflow:hidden’>”);</script>
————————————————————————————–Hope this helps.
—
Best Regards,
SNT Developers
****************************Now the site is not resolving properly. As this website belongs to Ministry of Culture, Govt. of India and they have requested us to fix this issue so that the website runs smoothly without any issue, if this issue can be fixed then it would be great. what needs to be done to fix this issue ?
I am providing you the screenshots below, kindly have a check.
https://i.imgur.com/bepx45n.png – website
https://i.imgur.com/gq5sk1t.png – popup 1
https://i.imgur.com/KDSVQ1e.png – popup 2
https://i.imgur.com/4Tijpyo.png – pop up 3
https://i.imgur.com/KMFXUsI.png – malicious link
https://i.imgur.com/K3MK6Rh.png – code
https://i.imgur.com/99U62DP.png – code2
I hope I am able to explain the issue. Looking forward to your response and a solution for this issue. Awaiting your reply…
—
Best Wishes & Regards,
Lily M.October 25, 2019 at 4:07 am #1151051Hey Lily,
Sorry for your problem, though we can’t really be responsible for sites getting hacked. Do you have a backup which you can roll back to before the hack occurred maybe? If not then I would recommend getting it cleaned using a service like Sucuri or similar.
Best regards,
Rikard -
AuthorPosts
- You must be logged in to reply to this topic.
