Just today when I tried to access my site I got a warning saying my site has harmful content.
I have tried scanning the site with clamAV and some other online sites for virus scan but did not find anything. I submitted my site to Google and it is still saying it is malicious. There is no sample URL for the malware, it only says "Undetermined malware"
I am using WordPress, there was no plugin updated recently. How can I find which part of my site is infected?
I tried console of google chrome, tried installing new anti-malware plugin (nothing found), tried to scan the site with different other websites and such but nothing gave any positive result.
Security on a website is very different from security on a home computer. Fixing this will be hard for someone who knows what they are doing, you have a lot of learning to do ahead of you before you will be able to accomplish this effectively. As a first step you need to try to identify when the problem started and revert to an earlier backup. Then remove ALL plugins, upgrade your WordPress installation to the latest version then change all the passwords associated with your site, then ONLY install the absolutely essential plugins - and make sure its the latest production versions of these.
This might fix the problem.
Related
My Problem
I manually installed WordPress on a Debian 9 VM in Virtual Box on a Windows 10 machine. When I pull up the website, this is what I get:
A WordPress site with just HTML, no formatting
The point of this install was to learn how to make a custom WordPress theme. I have built child themes before, but never a theme from scratch, so it may be I don't have everything set up yet. But there is a second issue is WordPress does not give me an option to select my second theme either.
What I did
To set up the site, I followed this tutorial on setting up WP on a Debian system. I sort of touched up on this, but I am new to WP development. I thought this was a quick and dirty route to set up a WP install. I don't have the knowledge of WordPress to know if there is an error in this setup guide.
Again, I checked the themes folder. I could not find the custom theme I started to build as an option. I can't currently download themes straight from WP because I don't have an FTP server/client currently installed on my machine. If it were just the inability to choose a WordPress theme from the WordPress theme repository, I'd suspect it's the FTP setup. But, I also can't choose my custom theme. So is there something wrong with the install?
Summary
I can't get any formatting to work on my WP development site. I suspect it's some problem with themes, but I don't know enough about the internals WordPress to know how to diagnose the problem.
Thank you for your time
It's tough to say without seeing your setup exactly, but this is often caused by URL problems.
Are you able to access wp-admin? If so, try logging in and visiting the settings > permalinks page, then just hitting the save button.
Try reloading your site. It might be fixed.. If not, a little more to try. First, I'd open your browser's Console / Inspect mode, and see if there are any console errors (showing CSS files not loading, etc). If so, post them here.
Additionally, I found a helpful article that details some other things to try when this problem pops up:
http://wphelp24.com/how-to-fix-wordpress/how-to-fix-wordpress-css-not-loading/
I have two openx 2.8 servers running here. The issue is that trying to open the admin page redirects me to the full path www.myserver.com/www/admin/index.php with blank screen. Still I can access www.myserver.com/www/images/, delivery etc. I tried a lot of stuff without any success.
this one doesn't work for me OpenX Admin not accessible
I had something similar happen to me last week. Check your configuration file in the /var folder of your openx installation, probably called something like www.yoursite.com.conf.php. Mine was corrupted. I suspect outside malicious activity, especially since there are known vulnerabilities in OpenX.. I'm currently looking at upgrading to Revive Ad server, which is the successor and is supposed to offer a complete upgrade path.
I have a simple Joomla site, sometimes it dies. I found a file containing the following code:
if(date('s',time())%2==0) die();
I deleted the code, and then it appeared in another file.
When I download the site via Akeeba and install it on localhost, and then delete all the bad code then the site is clean (and the virus doesn't return). But in my server the virus is still active.
Any idea how to fix the problem?
Please help me!
You probably have a vulnerability in the website that a script or hacker is exploiting to reinfect the website.
Make sure you have updated to the latest version of Joomla in the series. For example this is currently Joomla 3.3.6 for the Joomla 3.x series.
More likely the issue is with a third party extension. Make a list of third party extensions via Extension Manager (the third party extensions are the ones that have something other than "Joomla Project" as the author). Remember that not all extensions use the Joomla updater so some updates have to be done manually. Run through the list and check that you are using all the latest versions. You can find the latest versions via http://extensions.joomla.org and/or the developer websites.
You should also check http://vel.joomla.org/ to ensure that you are not using any vulnerable extensions.
You should also reset administrator password(s), the database password and your hosting password.
Repeat the above steps for any other websites that share the same web hosting account.
Check that any CRON jobs in your hosting account are legitimate.
If you are serious about eradicating malware from your website, you should probably subscribe to myJoomla.com or have the website professionally scanned by Sucuri or some other security expert.
Alternatively, you may be able to eradicate the malware by deleting the website and restoring from a backup or deleting the website and rebuilding it from scratch taking care not to reintroduce the malware from backed up files.
I have a fresh wordpress 4.0 install on my server for a specific domain and when I make changes to any of the theme files it won't show up in the browser for a few reloads. I just add "asdf" to the theme file to test changes. I can refresh 20 times but no changes show up until like 20 seconds later.
What I have tried:
Turned off firefox's cache.
Turned off wordpress cache.
Tested other domains on my server with wordpress and they work properly.
Installed wordpress with "server installer apps"(3 times) and also with manual installation.
I refresh with ctrl+f5
Tried with firefox and with chrome, same results.
Its a fresh install so no plugins, no settings changes. There is no caching and my other domains work properly. No errors show up in the console.
I have no idea what the problem could be. My server company, mediatemple, said it could be my ISP, but other domains on my site work properly from the same computer/network. For some reason the problem is specific to this domain and the problem persists through all the themes.
I don't know what to do next. Any suggestions would be greatly appreciated. :)
Update:
Have tried manual install of wordpress 3.9 and that does nothing.
I added a new folder to the root and in that folder I added a file called index.html to test if this file, which is unaffected by wordpress, would show instant changes and IT DOES. So the problem seems to be based within wordpress and specific to this domain.
I spoke to Mediatemple for the 3rd time now and this guy was much more helpful and he actually solved the problem.
When you add a domain to mediatemple it automatically sets the PHP version to "FastCGI", which normally is fine, but it caused problems specifically on this one domain's wordpress install for unknown reasons. So he switched the PHP version to "CGI (Stable)" and that fixed every problem.
I hope this will be helpful to someone in the future. :]
I need help to resolve my problem.
Suddenly my magento sites are broken, all pages, not only front pages but also backend pages, redirect install page, http://hogehoge.com/index.php/install/.
I don't know why this kind of problem happen.
Of course I checked server logs, my server is attacked or not but I cannot find attacked logs.
But I find one supposed reason, I think after updating phpMyAdmin my magento sites are broken.
On my server, not only magento but also another application, wordpress, piwik and so on, work but only magento had problem.
If all applications were broken, I could understand, but only magento broken I want to know what wrong is.
Maybe if I can repair by magento-db-repair tool, it's ok but I think I can't make solution basically.
So please advise me what I should check my server configuration.
My server spec is
Centos6.4 64bit
apache2.2.15
php5.4.23
mysql5.5.35
phpMyAdmin4.1.1(<=update from 4.1.0)
magento1.7.0.2 and 1.8.1.0
Thank you.