• Hi,

    I have already fixed this issue but thought it might be important to post incase anyone else runs into this. After fixing some posts on my website and having my friend look at them he told me they we’re redirecting to various ad farm sites. So after many hours. And not finding anything on my pc or his, but after a few attempts at loading my site it trys to give you a js.wonka trojan. So after deleting cookies, re-installing core wp, and combing the net for answers I finally ran into this thread https://en.forums.wordpress.com/topic/possible-hijacked-pages where someone else had the same issue. After I replaced the header.php in my /wp-content/themes/swift/header.php it worked just fine and no longer seems to have the issue. I am not using the default theme so it appears to be just writing to the ‘active’ themes header file. This all actually happened right after i updated one of the plug-ins called Global Translator but I am unsure if it was specifically from that plug in. I don’t have it anymore because i deleted it so hard to tell.

    Well, I hope this is of help to anyone that runs across the same issue.

Viewing 5 replies - 1 through 5 (of 5 total)
  • You just saved me hours! Thanks. I had not updated my blog to the latest version. I’m hoping that was what allowed whoever it was to be able to do this.

    Wow! I was having the same problem with that darn js.wonka trojan. I’m so glad I came across your posts, because I cleared away the trojan the same way. I went to my original theme files and put in the original header.php file, and the trojan disappeared!

    Thanks a bunch!

    Another victim of js.wonka. Fixed the same way. Also hoping that upgrae to 2.9.2 will prevent this hack from coming back.
    Thanks

    Don’t want to sound like a doh doh head here but where do you find the code to change the php link. I reverted to the default theme changed the code on the header but I’m sure that’s not right because Im still getting a redirect. Take a look at what happens HERE

    The alternative is to take the blog down and restart a new one. That is not a very attractive option.

    Thanks to anyone who can respond.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Website Forced Redirects’ is closed to new replies.