Is your WordPress website redirecting users to a malicious web page?

A most recent and common attack on WordPress websites that surfaced past week is redirecting website users to a malicious advertisement web page. Many WordPress sites have reported to be affected by this malware. If you are among those unlucky website owners that are victim to this attack, then worry not because most often it can be completely removed from you website within a few minutes, just bear with me here.

A word of caution before we proceed further. To resolve this issues with your website, you will need to alter a few WordPress files and data. This post is a suggestive guide for debugging the problem and is in no way a professional solution for the same. Reader discretion is advised before running any commands on the website server. Make a backup of all your data on the website server before proceeding with this guide. Author of this post and Eternal Geeking (Website) will not be responsible for any losses (data or monetary) caused due to any of the steps mentioned below.

– Eternal Geeker

What it looks like for your users?

A user visiting you website will be redirected to a new malicious/ads filled web page which has no relation to you website what so ever. For your end users your website is gone.

If your users are using any anti-malware plugin or ad blocker plugin there is a very high chance that you users will see a warning message before entering the malicious web page. To them your website is the malicious website now and this might also affect your Google indexing scoring.

What should you do if your website is affected?

The first and foremost thing you can and should do is reach out to your users via other communication mediums. They your most valuable assets after your content. Keep the users posted on what’s happening? Communication is the key here. Now to solve the issue with your website you need to follow the steps below:

  • If you have access to the web hosting server i.e., if you have set up the WordPress yourself then I am assuming you know your way around things. The commands shared in the step below are for a Linux server and might not work on a Windows server, but the steps to identify and rectify the problem will remain the same.
    • Yes, I know my way around!
      1. Log into the hosting server of the affected website.
      2. Traverse to the root directory of your website. For a website, root is the outermost directory from where the content is served. If you WordPress is installed in
        /var/www/html/wp
        then the directory ‘wp‘ is your root directory. You can simply write:
        cd </path/to/your/website/root>
        Replace </path/to/your/website/root> above, to the actual absolute path to your website root.
      3. Once in the root directory, simply look into the ‘index.php‘ file for something that doesn’t belong there in our case it is a script tag in the beginning of the file containing a URL with domain ‘ws.stivenfernando.com’ . since we get the identifier we will now run the following commands to identify all the affected files.
        grep -rnw ./ -e "ws.stivenfernando.com" > infected.txt
        The above command will write a list of files affected/infected by this malware. As a pattern you will notice that the infected files are all named index. So this malware only affects/infects file with name index and simply appends a malicious script tag in the beginning of the file to redirect to the malicious web page.
      4. Now comes the hard part. Removing those script tags from each of the files listed in the infected.txt file. You can either manually going through each file and remove the script tag, or write a script to perform this operation. The former can take you forever to complete depending on your installation and number of files in your installation. You can always remove a few of the affected plugins and themes to remove its files and reinstall to get malware free code from source.
      5. When you think you are done with removing the malicious code. Run the command in Step 3 above to make sure that there are no files missed.
      6. One last step here would be to log into the MySQL server and in your website database look into wp_options table. If the entry for Site URL is changed to the malicious URL above (ws.stivenfernando.com) change it back to your own website URL.
    • No, I haven’t set up the WordPress myself!
      1. Contact the person who has set up the website for you.
      2. Tell them about the exact issue. If required share this post with them.
      3. Let them handle it, as they know their way around.
  • If you do not have access to the web hosting server. Contact your hosting service provider with a request to restore a previous backup without the malware code considering that your hosting provider makes regular backups of your website. The best you can do in this case is to get in touch with the technical support of your hosting provider to resolve the issue.

WordPress issue link: https://wordpress.org/support/topic/hacked-138/

If this guide was helpful and you were able to resolve your problem, don’t forget to like, share and give a shout out to EG! Comment below for any suggestion and edits related to this post.

Eternal Geeker

Writer & Blogger

Related Posts:

14 Comments

  • As far as me being a member here, I wasn’t aware that I was a member for any days, actually. When the article was published I received a notification, so that I could participate in Comments, so perhaps that is it. But we’re certainly all members in the world of ideas.

  • Hi there! Do you know if they make any plugins to assist with
    Search Engine Optimization? I’m trying to
    get my blog to rank for some targeted keywords but I’m not seeing
    very good gains. If you know of any please share.

    Thanks! You can read similar art here: Ecommerce

  • Hi! Do you know if they make any plugins to help with SEO?
    I’m trying to get my blog to rank for some targeted keywords but I’m not seeing
    very good gains. If you know of any please share.
    Thank you! You can read similar art here: E-commerce

  • Good day! Do you know if they make any plugins to help with Search Engine Optimization?
    I’m trying to get my blog to rank for some targeted keywords but I’m not seeing very good gains.
    If you know of any please share. Thank you! You can read similar article here:
    Ecommerce

  • I have learned some new things from a blog post. One more thing to I have recognized is that normally, FSBO sellers will reject people. Remember, they would prefer to never use your solutions. But if a person maintain a reliable, professional romance, offering assistance and remaining in contact for four to five weeks, you will usually have the capacity to win interviews. From there, a house listing follows. Cheers

  • A lot of thanks for every one of your work on this web site. Debby really loves making time for internet research and it’s really obvious why. My spouse and i know all of the dynamic tactic you convey great tips through your blog and as well foster contribution from website visitors on this area of interest and our girl is always starting to learn a lot. Have fun with the rest of the new year. Your carrying out a very good job.

  • Excellent read, I just passed this onto a friend who was doing some research on that. And he actually bought me lunch because I found it for him smile Thus let me rephrase that: Thank you for lunch!

  • Have you ever thought about adding a little bit more than just your thoughts? I mean, what you say is important and everything. But its got no punch, no pop! Maybe if you added a pic or two, a video? You could have such a more powerful blog if you let people SEE what youre talking about instead of just reading it.

  • Great website right here! Additionally your web site starts up very fast! What host are you getting service from? Can you pass along your associate link for your host? I want my web site loaded up as fast as yours lol

  • oprah also makes some good book reviews, i always wait for the book reviews of oprah~

  • Hey there just wanted to give you a quick heads up and let you know a few of the pictures aren’t loading correctly. I’m not sure why but I think its a linking issue. I’ve tried it in two different internet browsers and both show the same outcome.

  • Your blog never ceases to amaze me, it is very well written and organized.**”*,

  • i love to also get some beach body but it requires a lot of diet modification and exercise;;

  • I see You’re actually a good webmaster. The site loading pace is incredible.
    It seems that you are doing any distinctive trick. In addition, the contents are masterpiece.
    you have done a excellent task in this subject! Similar here:
    sklep and also here: Sklep internetowy

  • Your blog never ceases to amaze me, it is very well written and organized.”~’;-

  • I am glad to be a visitant of this double dyed web site, appreciate it for this rare info!

  • Im impressed. I dont think Ive met anyone who knows as much about this subject as you do. Youre truly well informed and very intelligent. You wrote something that people could understand and made the subject intriguing for everyone. Really, great blog youve got here.

  • Wow, this is really interesting reading. I am glad I found this and got to read it. Great job on this content. I like it.

  • Excellent website. Lots of useful information here. I am sending it to a few friends ans also sharing in delicious. And naturally, thanks for your sweat!

  • I definitely wanted to write down a message to appreciate you for all of the wonderful tips and tricks you are writing on this site. My rather long internet look up has finally been honored with wonderful concept to exchange with my relatives. I would state that that we visitors actually are undeniably endowed to exist in a really good website with so many perfect professionals with beneficial solutions. I feel very much privileged to have used your weblog and look forward to plenty of more excellent times reading here. Thanks once again for a lot of things. click my site here – alternative medicine institute kolkata

  • the best air purifiers are usually the ones using hepa filters but they are very very expensive;;

  • An outstanding share! I have just forwarded this
    onto a colleague who has been conducting a little homework on this.
    And he actually ordered me dinner simply because I discovered
    it for him… lol. So allow me to reword this….
    Thanks for the meal!! But yeah, thanks for spending the time to discuss this topic here on your blog.

  • I am curious to find out what blog system you have been working with?

    I’m having some small security issues with my latest website and I would like to find something more risk-free.
    Do you have any solutions?

  • Thanks a lot for sharing this with all of us you really realize what you are talking about! Bookmarked. Kindly additionally seek advice from my site =). We will have a link alternate arrangement between us!

  • Youre so cool! I dont suppose Ive learn something like this before. So good to search out anyone with some original ideas on this subject. realy thank you for beginning this up. this web site is something that is wanted on the web, someone with just a little originality. helpful job for bringing one thing new to the web!

  • I am typically to blogging and i truly appreciate your content regularly. The content has really peaks my interest. I am going to bookmark your site and maintain checking achievable details.

  • You truly ensure it is appear really easy along with your presentation however i find this kind of matter to become really something which I believe I’d never realize. It seems too complex and extremely great for me. My partner and i’m looking ahead on your own next publish, My partner and i?|lmost all make an effort to get the cling of it!

  • Wow!, this was a top quality post. In theory I’d like to write like this too – taking time and real effort to make a good article… but what can I say… I procrastinate a lot and never seem to achieve anything

  • It’s a shame you don’t have a donate button! I’d without a doubt donate to this brilliant blog! I suppose for now i’ll settle for book-marking and adding your RSS feed to my Google account. I look forward to fresh updates and will share this blog with my Facebook group. Chat soon!

  • I intended to send you the little word to finally give thanks the moment again considering the pleasing suggestions you have contributed above. This has been simply remarkably open-handed with people like you to grant unreservedly what most of us might have marketed for an electronic book to help make some bucks on their own, even more so given that you might have tried it in case you decided. These tips additionally served like a fantastic way to be certain that other people online have the same dream much like my own to know significantly more with reference to this problem. I believe there are some more fun periods in the future for individuals that scan through your blog.

  • abstract art have share some of its unique beauty when it comes to art. i like abstract art because it is mysterious“

  • After study a handful of the web sites on your own site now, we truly appreciate your way of blogging. I bookmarked it to my bookmark website list and you will be checking back soon. Pls take a look at my internet site in addition and inform me what you believe.

  • Spot up for this write-up, I actually think this excellent website wants far more consideration. I’ll probably be again to learn to read a lot more, thank you for that info.

  • Let us not think of each other as enemies as we are friends for sure.

  • I image this might be various upon the written content material? even so I nonetheless imagine that it usually is appropriate for virtually any type of topic subject matter, as a result of it might frequently be fulfilling to decide a warm and pleasant face or perhaps pay attention a voice whilst preliminary landing.

  • This is a proper blog for everyone who hopes to learn about this topic. You are aware of much its almost tricky to argue on hand (not that I really would want…HaHa). You actually put a brand new spin on a topic thats been discussed for some time. Great stuff, just excellent!

  • We still cannot quite think I come to be a version of those staring at the important points positioned on your webblog. Our grandkids i are sincerely thankful with your generosity as well giving me possibility pursue our chosen profession path. Document right information I of the web-site.

  • breakfast bars are nice addition to the kitchen, i would really love to install them at my own home::

  • Sometimes the better to simply take a stride back as well as recognize that not everybody gives your own beliefs

  • Question Have you personally shopped here before. Why or why not. Remember to ask about next steps and when you can expect to hear back.

  • “I am shocked at the items I overlooked before I read this post.”

  • Hola i would really love to subscribe and read your blog posts .

  • I’m impressed, I must say. Really rarely do I encounter a blog that’s both educative and entertaining, and let me tell you, you’ve got hit the nail for the head. Your notion is outstanding; the pain is something that insufficient everyone is speaking intelligently about. We’re happy that we came across this at my look for some thing concerning this.

  • Oh my goodness! a great article dude. Thank you However I’m experiencing issue with ur rss . Do not know why Unable to join it. Will there be everyone acquiring identical rss dilemma? Anyone who knows kindly respond. Thnkx

  • Informative, pretty much as I had come to expect from this site.

  • I genuinely appreciate your work , Great post.

  • i have some small garden of herbs at home, i use them for baking foods and as herbal medicines..

  • Thoughts talk within just around the web control console video clip games have stimulated pretty professional to own on microphone as well as , resemble the perfect “tough guy” to positively the mediocre ones. Basically fundamental problems in picture gaming titles. Drug Recovery

  • elton john can be only be the best singer and composer that i know. i like the song Candle In The Wind`

  • Lovely blog! I am loving it!! Will come back again. I am bookmarking your feeds also

  • too much vitamin-a can also cause osteoporosis but aging is the number cause of it,,

  • Some genuinely good info , Gladiola I observed this.

  • well, i would say that infertility can be a thing of the past because of modern advancements in medicine“

  • Straight to the point, i love it. Dont let anyone stop us bloggers.

  • power tools can really save you from a lot of headache, specially when the job is very hard-

  • Amazingly, your piece goes to the heart of the topic. Your clarity leaves me wanting to know more. Just so you know, i’ll immediately grab your feed to keep up currently with your online blog. Sounding Out thanks is merely my little way of claiming what a masterpiece for a fantastic resource. Take On my best wishes for your subsequent publish.

  • A person essentially lend a hand to make significantly articles I might state. That is the very first time I frequented your website page and up to now? I amazed with the research you made to create this particular publish incredible. Great activity!

  • Heya i would really love to subscribe and read your blog posts .

  • I definitely appreciate your website. Thank you for your insights and guidance.

  • Good day! I could have sworn I’ve been to this blog before but after reading through some of the post I realized it’s new to me. Nonetheless, I’m definitely glad I found it and I’ll be bookmarking and checking back often!

  • The difference between the right word and the almost right word is more than just a fine line! it’s like the difference between a lightning bug and the lightning!

  • But wanna state that this is handy , Thanks for taking your time to write this.

  • I found your weblog web site on google and check a few of your early posts. Continue to maintain up the superb operate. I just further up your RSS feed to my MSN News Reader. Searching for forward to studying extra from you in a while!…

  • those polyurethane inflatable boats are very sturdy and some are kevlar lined too but they are expensive*

  • Hello there. I needed to inquire some thing…is this a wordpress site as we are thinking about transferring across to WP. Moreover did you make this theme all by yourself? Cheers.

  • Thank you for making the effort to talk about this situation, I think highly with this complete or absolutely adore examining read more about this amazing theme. When potential, while obtain abilities, is it possible you opinions improving your ultimate website by having in depth specifics? This is very great for anyone.

  • Augustine thanks for sharing this! My extensive google search has now been recently paid for using quality insight to talk about together with our relatives.

  • I am just use very happy understand this. This can be the method of information which needs to be presented harmful . ” the actual random hype may possibly be inside the another webpages. Satisfaction from your individual sharing with us the following prime file.

  • You helped me a lot with this post. I love the subject and I hope you continue to write excellent articles like this.

  • Wonderful site. Lots of helpful info here. I¡¦m sending it to some buddies ans additionally sharing in delicious. And certainly, thank you for your effort!

  • I agree using your thoughts here and I love your blog! I’ve bookmarked it so that I will return & read more sometime soon.

  • I’m impressed, I must say. Genuinely rarely will i encounter a weblog that’s both educative and entertaining, and let me tell you, you could have hit the nail about the head. Your concept is outstanding; the catch is something that not enough folks are speaking intelligently about. I am very happy which i found this at my seek out some thing concerning this.

  • Its fantastic as your other articles : D, appreciate it for putting up.

  • Yours is a prime example of informative writing. I think my students could learn a lot from your writing style and your content. I may share this article with them.

  • I would like to show my gratitude for your kindness for people that absolutely need help with this particular content. Your very own dedication to getting the message all-around became particularly good and have in most cases encouraged girls much like me to achieve their goals. This informative guideline implies so much to me and much more to my office colleagues. Thanks a lot; from each one of us.

  • I definitely wanted to make a message to express gratitude to you for those awesome secrets you are posting at this site. My rather long internet lookup has at the end of the day been recognized with awesome strategies to exchange with my friends. I ‘d state that that many of us website visitors actually are undoubtedly fortunate to exist in a perfect place with so many outstanding individuals with helpful plans. I feel pretty lucky to have encountered the webpage and look forward to plenty of more enjoyable moments reading here. Thanks a lot once more for a lot of things.

  • This web page may be a walk-through like the knowledge you wished about it and didn’t know who to ask. Glimpse here, and you’ll definitely discover it.

  • I’d ought to seek advice from you here. Which isn’t some thing I usually do! I spend time reading an article which will make people believe. Also, thank you permitting me to comment!

  • Don’t believe who even if its absolutely free fails to entail that it’s fine! When you are thinking about the numerous different options around a person, never ignore ours.

  • very nice post, i definitely really like this site, persist in it

  • I was also reading a topic like this one from another site.”‘,*-

  • Oh my goodness! a great post dude. Appreciate it However I am experiencing problem with ur rss . Do not know why Unable to subscribe to it. Perhaps there is any person getting identical rss problem? Anyone who knows kindly respond. Thnkx

Leave a Reply

Your email address will not be published. Required fields are marked *

About Me

I convert Coffee  to Code </>

Game Travel Eat Sleep Repeat

Popular Posts

  • All Post
  • Announcements
  • Development
  • Everything Tech.
  • Experiences
  • TIL - Today I Learned
  • Wanderlust
  • World Of Web

Newsletter

JOIN THE EG FAMILY!

Get a access to posts as soon as they are live on the blog.

You have been successfully Subscribed! Something went wrong please try again later.

Featured Posts

  • All Post
  • Announcements
  • Development
  • Everything Tech.
  • Experiences
  • TIL - Today I Learned
  • Wanderlust
  • World Of Web

Instagram

Edit Template

A website by a Geek for the Geeks!

© 2024 Eternal Geeking