Hacked?

Dear Janet Z.,

if you suspect that your website has been hacked, I strongly recommend you to change ALL your passwords (WordPress login details, FTP, MySQL database connection). You can use the Wordfence Security plugin to detect the infected files. This plugin also helps to protect your website from hacks and malware. Here are another suggestions how to improve security of a WordPress website.

Best regards,
Tomas Toman

Tomas,

Thank you for that. I did the Wordfence Security scan and it showed no threats. I spoke to my hosting company that insisted it had to do with my browser even though it happens on other browsers. I caught the url that pops up between my website and the site it redirects to. It’s this:

https://www.youradserver.com/script/packcpm.php?k=55ef42327b0866032771.8819547&h=fe7a06f0e09ed172ee9bc20391dc3c73410ff6a4&ban=6032771&r=261793&iid=14417434101238261989105733474898852&ci=%3DokSHcQAE0QFOZ1WSNVFbcwBDEwDNUhTUllUCZkUFFVFb4gDO4gDNUhTD51QZZlQGVBTNURdVshSH0QFOZ1WSNVFbcwBDEwDNUhTUllUCZkUFFVFbYQDV40QeNUWWJkRVwUDVQXFbo0BNUhTWtlUTVxGHcQBEMQDV4EVZJlQGJVRRVxGG0QFONkXDllVCZUFM1QFtVBT&pm=%3DUhWHRVF&pabt=%3DUhAFkhBn1GaHcUF&pc=%3DUhDO4gDO4gDO4gDBEQAGMgAZQQF&id=6032771&ct_bust=0.6778637885581702&exp=su11

How do I get rid of it and secure my site?

Thanks.
Janet Z.

Try a few good local malware removal tools like:

– Malware bytes anti malware
– Reason Core Security

In general, the issue is local not on network/host side. You could do a full backup swing of data, clean that and then reupload to your webserver. Given that databases are just text and can’t be infected.

Anyways, any professional company host has much stronger than that anyways so any virus wouldn’t stand 2 seconds in a decent hoster/vps/dedicated server environment.

If you host it yourself, use linux and nod – with good iptables – would be a good start ??

Regards,