Hi,
Can you help with my newly reinstalled site? I have virus warning on dev.vertesinfo.hu with NOD Internet Security.
I found this, I hop It helps to figuring out what’s going on.
Thanks
Hello Vertesinfo202310 do you have the last theme version and you have the same problem like on post from reddit? If so, then please open the “Live CSS” and click on save button – https://i.imgur.com/RkrmBkT.jpg (this will check if the malware is in live css and if is it will remove it).
I hope this will help you!
Hi Calin,
Thanks for your guide. I removed the malicious code from database by the guide on Reddit.
https://imgur.com/a/WDhWPNj
The Live css window was empty. I saved it.
Could you confirm, the theme, theme plug-ins and the site doesn’t contains any malware or malicious code?
Thanks
Hi Calin,
I have got this from ESET:
The td-composer plugin contains the suspicious parts, which is a script file that seems really irrelevant to a visitor, but is still loaded, because apparently this would only be necessary for the developer to create the interface, but a WP developer needs to see better what this plugin is exactly:https://imgur.com/a/dRaFGQX
Hi Vertesinfo202310,
When we make the update on theme package we scan package and also the themeforest has a system for this to not infect the platform.
The code from your screenshot is related to the login, live a comment and register. This script is used to display a popup modal for sing in / register.
Thank you!
