Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




1978 posts

Uber Geek


# 259905 29-Oct-2019 16:49
Send private message quote this post

Hi

 

Wordpress  :-(
I have a client with a neglected website in need of a professional cleanup
Ive tried Wordfence & Quttera scan tools from within wordpress . Ive also tried external scan tools

 


Google Search Console shows it has "Hacked:URL injection" &  gives examples of spammy urls on the website
These hacked urls are hidden it seems, you cant brose to them & the Web scan tools Ive tried dont find them.

So , Im after recommendations of a Site Cleaning Service I can recommend to the owners , a service that can dig in at a lower level & wont rely on just a scan tool
The website was hacked & cleaned in the past . Its still has issues that google doesnt like , so a google search will show as "this site may be hacked" , because of those
hidden spammy links (hacked URL injection)

 

Cheers

 

 

 

 


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
2958 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2345948 29-Oct-2019 17:33
Send private message quote this post

Have you tried downloading the whole site, and database then doing a keyword search across the whole thing?

 

Of course I would assume there are no backups?

 

And if it's a basic site is it easier to just rebuild from scratch if you download any important static content.





and


317 posts

Ultimate Geek


  # 2345965 29-Oct-2019 18:43
Send private message quote this post

I cleaned dozens of sites back in the day. The most sophisticated ones will use every trick on the book to hide from prying eyes, like sending different response depending on the client's user agent and ofuscating the code. What it works best in my experience is search the php code and look for functions commonly used to hide code like eval() and base64_decode() .

 

This posts has some sensible tips to clean a site https://www.wpwhitesecurity.com/clean-hacked-wordpress-website-blog/ 


 
 
 
 


15565 posts

Uber Geek

Trusted
Subscriber

  # 2346022 29-Oct-2019 19:39
Send private message quote this post

Can you just install Wordpress and the plugins fresh, and restore the DB?


15345 posts

Uber Geek


  # 2346025 29-Oct-2019 19:47
Send private message quote this post

Guessing it is all riddled through the database, as well in files. The problem is that many people get these wordpress websites setup, perhaps by a friend, but then doesn't keep it all updated with the latest plugins etc. So sometimes the best solution is to start again. I am becoming more and more of a fan of SaaS websites for regular brouchure type websites, as you then don't have to worry about keeping it up to date, or keeping regular backups. Wordpress can be quite expensive, if you are doing everything correctly, using third party services for backup, security, etc,  and want a fast quick secure website.. But i do use wordpress for my own website. It is easy to setup, but it can be a frustrating over time when things need updating and when things go wrong.




1978 posts

Uber Geek


  # 2346168 30-Oct-2019 09:20
Send private message quote this post

Ive now run several WordPress malware scan plugins, none found the infections.
So , Im yet to find a cleaning program that will even detect the issues

 

Its one of those sites where it wasnt ever maintained or kept up to date with WP updates . I doubt there will be a clean backup to restore from.
It may need to be examined line by line ?
A rebuild from scratch may be the way to go .

 

 


3385 posts

Uber Geek

Trusted

  # 2346218 30-Oct-2019 10:38
Send private message quote this post

1101:

 

Google Search Console shows it has "Hacked:URL injection" &  gives examples of spammy urls on the website
These hacked urls are hidden it seems, you cant brose to them & the Web scan tools Ive tried dont find them.

 

 

 

 

What is the site? Google spider must be crawling to them somehow? 


50 posts

Geek


  # 2346234 30-Oct-2019 10:58
Send private message quote this post

Try reach out to your hosting provider, they may have tools for this situation like Sitelock, immunify360 etc


 
 
 
 




1978 posts

Uber Geek


  # 2346269 30-Oct-2019 12:09
Send private message quote this post

timbee:

 

Try reach out to your hosting provider, they may have tools for this situation like Sitelock, immunify360 etc

 

 

Been there, done that. They had a look, claimed they cleaned some infections . Its still showing as infected in the Google Search Console .
They suggested "Protection Power CDN " to protect the website. These tools dont seem to find the issues .

 

 

 

 


1837 posts

Uber Geek


  # 2346280 30-Oct-2019 12:52
Send private message quote this post

And Search Console doesn't give you any more information, eg telling you which files it thinks are infected?


15345 posts

Uber Geek


  # 2346301 30-Oct-2019 13:39
Send private message quote this post

Are they not using some form of wordpress security plugin Wordfence?


336 posts

Ultimate Geek


  # 2346310 30-Oct-2019 14:07
Send private message quote this post

I've also had some success downloading the website then running your local antivirus tool (eg NOD32) through it. Often picks up a few infected files.




1978 posts

Uber Geek


  # 2346619 31-Oct-2019 08:51
Send private message quote this post

They didnt have any security plugins. I installed wordfence, It cont find the infections

The infections arnt files , they are "Hacked URL Injections"
Google search console gives the injected urls, but no search can find them.

 

 


2958 posts

Uber Geek

Trusted
Lifetime subscriber

  # 2346631 31-Oct-2019 09:48
Send private message quote this post

I suspect they have source based requests, or google has outdated information. Have you asked Google to re-index your site? https://support.google.com/webmasters/answer/6065812?hl=en





and




1978 posts

Uber Geek


  # 2346646 31-Oct-2019 10:27
Send private message quote this post

BarTender:

 

 Have you asked Google to re-index your site? https://support.google.com/webmasters/answer/6065812?hl=en

 

 

Yes, more than once .
Google also gives dates these issues where detected : redetected after re-index .

 

 


BDFL - Memuneh
65349 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2346651 31-Oct-2019 10:39
Send private message quote this post

I feel you. I know of a cafe in Wellington with an infected site. The site shows a scam page - but only on the first visit coming from Google search. If you go directly to the site nothing happens.

 

I've reported to the owner via Contact Us page, reported to CERT NZ... Still there, after nine months.

 

Search Automat Wellington.

 

 





 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Ring launches indoor-only security camera
Posted 23-Jan-2020 17:26


New report findings will help schools implement the digital technologies curriculum content
Posted 23-Jan-2020 17:25


N4L to upgrade & support wireless internet inside schools
Posted 23-Jan-2020 17:22


Netflix releases 21 Studio Ghibli works
Posted 22-Jan-2020 11:42


Vodafone integrates eSIM into device and wearable roadmap
Posted 17-Jan-2020 09:45


Do you need this camera app? Group investigates privacy implications
Posted 16-Jan-2020 03:30


JBL launches headphones range designed for gaming
Posted 13-Jan-2020 09:59


Withings introduces ScanWatch wearable combining ECG and sleep apnea detection
Posted 9-Jan-2020 18:34


NZ Police releases public app
Posted 8-Jan-2020 11:43


Suunto 7 combine sports and smart features on new smartwatch generation
Posted 7-Jan-2020 16:06


Intel brings innovation with technology spanning the cloud, network, edge and PC
Posted 7-Jan-2020 15:54


AMD announces high performance desktop and ultrathin laptop processors
Posted 7-Jan-2020 15:42


AMD unveils four new desktop and mobile GPUs including AMD Radeon RX 5600
Posted 7-Jan-2020 15:32


Consolidation in video streaming market with Spark selling Lightbox to Sky
Posted 19-Dec-2019 09:09


Intel introduces cryogenic control chip to enable quantum computers
Posted 10-Dec-2019 21:32



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.