Search Results for 'malware'

Per the theme install how-to (see link right side of page); you need to install from the theme zip file and not the “all files” zip, as that includes all sorts of support stuff. You can find the theme zip INSIDE of the big zip 🙂

Usually a good idea to download any zip file from the web and open it on your local PC/Mac to “see” what is inside it before uploading to your website — this also helps ensure there is no malware or other things you might not want to install — in some cases — irrevocably — on your website.

False positives. Not actually malware.
All content on ThemeForest is very rigorously inspected before you can download it.

Hi,
The malware is in the header tab field.
I’ve my banner, and I had blank lines then the script of the malware, I removed it but it seems that everytime I did an update(6.6.2 yesterday) with the envato toolkit, it came back. Could you check ?
Thanks

Theme has no infections. We’ve been using it for 2 years on multiple sites and we check system consistently for any issues including Google search console, dedicated server scanning, Securi, PCI-DSS etc.

You need to have your site checked carefully for malware, change passwords, reinstall all plugins from clean copies; remove any old themes and plugins not in use; scan your site with SECURI (free), and if your host has a security scanning service have them also check for rootkits and other nonsense.

Only YOU can fix your site if its been compromised. Note that some older versions of plugins, WordPress itself, are hackable, so these need to be up to date. Many older plugins prior to 2015 and not updated may have the cross-site vulnerability, comment injection vulnerabilities, etc.

Hi

We have tested the theme security rigorously before releasing and also it was tested and analyzed by Envato reviewers and if would have any security issues would not pass their reviews.
Also I’ve test your site with a malware security scanner and fond some malicious activities: https://sitecheck.sucuri.net/results/pavlikeni.com/ – http://screencast.com/t/ktyzW0bxVB Checking our demo too can be seen that is no thread there so can’t be a theme’s issue: http://screencast.com/t/hfBXLFGJSqzD
Try to deactivate all plugins except Visual Composer, clear all caches and test again. Also I found here some resources that may help you fixing this iisues: http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/ – http://vivavivugeek.blogspot.ro/2014/03/detect-and-remove-spam-seo-blackhat-seo.html

Hope this help.
Thanks!

Since this keeps coming up, you will likely need to make a note of this on the FAQs page, as some hosting scanners seem to think the class or hook using the phrase tds, is related to “TDS” malware.

It doesn’t say it’s malware, it says “this file is not commonly downloaded” … which merely means Google’s caching system for Chrome hasn’t had a lot of hits to that specific file. You can simply click the arrow and select “keep” … or more info.

The language used here DOES imply “oh no, danger Will Robinson …!”
https://support.google.com/chrome/answer/6261569?p=ib_download_blocked&hl=en&rd=1

Apparently ThemeForest has had their share of bad eggs:

More info for software developers and website owners
To help protect users, Google maintains a list of websites that are known to host malicious downloads and a list of trusted software publishers. If you're a software publisher and your binaries are flagged by Chrome, learn how to resolve malware or unwanted software issues related to your downloads.

This is part of Chrome’s updated security which has a “threshold” for files loaded off the web and downloaded to hard drive, to stop malicious files being written to your HD when they are zero day files.

Several other files do same thing, like a u-design theme update, and woocommerce tabs plugin. Newspaper 6.5 does not 🙂

In case anybody was curious about that 🙂

• This reply was modified 10 years by simchris.
• This reply was modified 10 years by simchris.
• This reply was modified 10 years by simchris.

I definitely DO NOT have malware on my comp. I follow through all other links here with no issue, it only comes up for your site. So I’m not sure @gfran5

Hi @shae101s,

My site is not spam, or blacklisted for that matter.. I have the site scanned regularly with Securi service. I think you may have malware or something on your computer.

Is anybody else getting same as @shae101s ??

Hi

I am not sure why Google Chrome warns you regarding the theme’s folder. We checked the theme’s folder, also envato check it before being approved for sale and there is no virus or malware so you can ignore the warning and download the folder.

Thanks!

And secondly Webmaster tools has escalated ‘Malware’ warning on our website after this upgrade.

Then your site likely got hacked due to a zero day flaw where somebody hacked the site before you had applied the security patches of the past couple of months for WordPress and various plugins; and/or your host didn’t properly secure their server.

Best bet is to
disable all advertising systems entirely …

a) reinstall all plugins – check all plugins on WordPress.org FIRST to see if they are updated in 2015 for security; if not then don’t use them; don’t use any plugins from free websites, abandoned plugins from Envato, etc. — YOU need to audit all your plugins one by one; perhaps use Securi to scan your site first!
b) reinstall WordPress; delete all themes not being used; all third party themes; start with twenty-eleven
c) douhle check your htaccess and wp-config files to see that nothing odd was added
d) ask your hosting provider to do a security scan of your site for virus/malware

perhaps do these first:
e) double check your comments for spam you have not deleted; consider turning off all comments if you are not using security checks for comment spam
f) do a search on your site for the term “Viagra” to see if content injections are being done into your posts — this is sure sign you have been hacked and/or have malware plugin

• This reply was modified 10 years by simchris.
• This reply was modified 10 years by simchris.
• This reply was modified 10 years by simchris.

Fixed it, apparently it was the dashbida malware that kept redirecting. Back to 1.7mb page size.

Sorry if I sounded mean and rude. Was having bad day.
I don’t work here, so don’t take any response from me as anything from TagDiv, who have more patience than a dog waiting for his master to come home, with treats 🙂

There is “adware” in circulation which injects Prosperent links into text; but most of the sites claiming to remove it are, themselves, pushing malware.

FYI
http://www.google.com/safebrowsing/diagnostic?site=prosperent.com

• This reply was modified 11 years by simchris.

So, I am wrong to think it came from the update (delusional – ouch, pretty harsh response).

Thanks for the idea to check for malware.

I think you are delusional,
First, how can you make money on links to social media,
Second, tagdiv has never inserted paid links in any theme.

Perhaps you can show example of this crazy concept…
You may have an infected computer injecting prospetent into your broswer via malware.

You should immediately download and run malwarebytes anti malware pro to disinfect your system, and perhaps setup a security strategy for your systems.