malware – infection – redirects

Posted in: Newspaper
Post count: 2

Hello,
how can i fix this problem?
my blog (blog.tifoshop.com) randomly redirects visitors to malicious sites.
I checked the homepage code:
the visual composer doesn’t work and the code is infected!
I don’t have a backup clean to replace, there is a possibility to have a support to restore the code?
thanks

there is an example of infected code:

[/vc_column_text][vc_raw_html]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
etc…

Post count: 1341

Try reinstall Visual Composer: https://forum.tagdiv.com/how-to-update-visual-composer-plugin/

If this does not work, you will have scratch to re-install WordPress and the Theme.

  • This reply was modified 9 years by Edward.
Post count: 9544

a) change passwords
b) reinstall WordPress (delete original files via FTP, do clean install; backup your wp-config.php file
c) delete and reinstall ALL plugins
d) delete and reinstall ALL themes
e) check root public folder for any errant php files; check htaccess file

* once site working, cleanly
** MAKE PERIODIC BACKUPS!
** Update WordPress when it tells you to for security patches
** disable editing of core files, disable XML-RPC, disable password reset option
** scan site once a month with free Securi site scanner
** MAKE BACKUPS!

Viewing 3 posts - 1 through 3 (of 3 total)
The forum ‘Newspaper’ is closed to new topics and replies.