The site is getting hacked

Need help with a different issue? Search the forums or open a new ticket.

Open a support ticket

This topic has 8 replies, 3 voices, and was last updated 9 years, 6 months ago by Anonymous.

2016-12-26 at 1:09 pm
Unknown Support Status

#18429
deytech
Participant
Topics: 3
Replies: 13
Total posts: 16
Post count: 13
The theme code is full of malwares! My host provider blocked my IP when I tried to upload the theme on my wordpress install saying attempt to upload malicious files and malwares blocked. Next, when I was finally able to upload it, the site was HACKED several times!

Reply
2016-12-26 at 1:29 pm

#18431
Anonymous
Inactive
Topics: 0
Replies: 3227
Total posts: 3227
Post count: 0
The theme doesn’t comes up with any malicious script because the theme is reviewed by the theme forest people.
If you can come on skype we can help you out in uploading the theme by sharing our screens. Our Skype ID: support-aws

Reply
2016-12-26 at 1:50 pm
Unknown Support Status

#18435
deytech
Participant
Topics: 3
Replies: 13
Total posts: 16
Post count: 13
[Mon Dec 26 12:44:10.270110 2016] [:error] [pid 19805] [client 122.173.80.135:19203] [client 122.173.80.135] ModSecurity: [file “/usr/local/apache/modsecurity.d/99_asl_scanner.conf”] [line “42”] [id “351000”] [rev “1”] [msg “Atomicorp.com Upload Malware Scanner: Malicious File upload attempt detected and blocked”] [severity “CRITICAL”] Access denied with code 403 (phase 2). File “/tmp/20161226-124225-WGDC2WyjjsYAAE1dNcAAAAAF-file-RukeC3” rejected by the approver script “/usr/bin/modsec-clamscan.pl”: 0 clamscan: Win.Trojan.Toa-5366575-0 [hostname “mixtapecartel.com”] [uri “/wp-admin/update.php”] [unique_id “WGDC2WyjjsYAAE1dNcAAAAAF”], referer: http://mixtapecartel.com/wp-admin/theme-install.php

Reply
2016-12-26 at 1:50 pm
Unknown Support Status

#18436
deytech
Participant
Topics: 3
Replies: 13
Total posts: 16
Post count: 13
This is the error log

Reply
2016-12-26 at 2:03 pm

#18437
Fem
Keymaster
Topics: 2
Replies: 5215
Total posts: 5217
Post count: 6003
The error doesn’t show any theme file affected with error or so. Usually on shared hosting you would get such attacks for that you need to keep your system cleaned and FTP should be used carefully.

Reply
2016-12-26 at 2:12 pm
Unknown Support Status

#18438
deytech
Participant
Topics: 3
Replies: 13
Total posts: 16
Post count: 13
I got this error only after I tried uploading the theme. I had previously deleted the content of the website since it was hacked several times. And now when I cleared all the data and installed wordpress again, the error was thrown when I uploaded the theme via wordpress admin.

Reply
2016-12-26 at 2:13 pm
Unknown Support Status

#18439
deytech
Participant
Topics: 3
Replies: 13
Total posts: 16
Post count: 13
this is the site: mixtapecartel.com

Reply
2016-12-26 at 2:20 pm

#18440
Fem
Keymaster
Topics: 2
Replies: 5215
Total posts: 5217
Post count: 6003
I have just now scanned the theme files downloaded from themeforest and it does not show me the theme with any infection or so.

Reply
2017-02-14 at 5:17 pm

#19219
Anonymous
Inactive
Topics: 0
Replies: 3227
Total posts: 3227
Post count: 0
Topic is set to be resolved because of no reply. If you wish to update this topic please reply here instead of creating another topic.

Reply

You must be logged in to reply to this topic.