Important: when posting, please provide your Club Number at a minimum, and as many details as possible.
For further info, please read This page before posting.

FTH4 BETA participation request are now CLOSED

The 106 clubs FTH4 Beta who are part of part of the FTH4 Beta. Please post in the FTH4 Beta Support Forum only.

Urgent: Malware Script Injected Into Site

  • PadreQ
  • PadreQ's Avatar Topic Author
  • Offline
  • New Member
  • New Member
  • Posts: 12
  • Thanks: 0

Urgent: Malware Script Injected Into Site

7 months 3 weeks ago
#97326
We detected a malicious script being loaded on our WordPress site:Injected script:
Code:
https://www.ski-snowboardvancouver.ca/j.js
 → redirects to → 
Code:
https://kuliboku.com/clipper/dom-composer.js
This is not ours and indicates a site compromise.Please run a full malware scan, remove the injected code, inspect theme/plugin files, scan wp_options, and secure the installation so it cannot reinfect.Thank you, 
Rick Quiroz
President of Stirling Toastmasters
The topic has been locked.
  • PadreQ
  • PadreQ's Avatar Topic Author
  • Offline
  • New Member
  • New Member
  • Posts: 12
  • Thanks: 0

Re: Urgent: Malware Script Injected Into Site

7 months 3 weeks ago
#97327
our site is www.stirlingtoastmasters.com . Club 7461416. Thank you!
The topic has been locked.
  • Brian
  • Brian's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 12233
  • Thanks: 3902

Re: Urgent: Malware Script Injected Into Site

7 months 3 weeks ago
#97328
1) we don't use or support wordpress.
2) what is your club number.?
Thank you,

Brian McDonald DTM
Silver and Wiser Online Toastmasters Club #777940

Technical Support Consultant for FreeToastHost
The topic has been locked.
  • Brian
  • Brian's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 12233
  • Thanks: 3902

Re: Urgent: Malware Script Injected Into Site

7 months 3 weeks ago - 7 months 3 weeks ago
#97329
7461416 is not a valid FTH club website.

The valid club number attached to your domain www.stirlingtoastmasters.com/
is 7461614

where are you seeing this link?
www.ski-snowboardvancouver.ca/j.js
Thank you,

Brian McDonald DTM
Silver and Wiser Online Toastmasters Club #777940

Technical Support Consultant for FreeToastHost
Last edit: 7 months 3 weeks ago by Brian.
The topic has been locked.
  • PadreQ
  • PadreQ's Avatar Topic Author
  • Offline
  • New Member
  • New Member
  • Posts: 12
  • Thanks: 0

Re: Urgent: Malware Script Injected Into Site

7 months 3 weeks ago
#97330
0741614 - I think i reversed the number earlier. I used screaming frog software to scan the site. It could be in the php or wp_options table. I don't know as I don't have experience outside of wordpress so I could wrong with my remedies. The site popped up on Norton security and I confirmed it in screaming frog software. What do you recommend?
The topic has been locked.
  • Brian
  • Brian's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 12233
  • Thanks: 3902

Re: Urgent: Malware Script Injected Into Site

7 months 3 weeks ago
#97331
We don't use wordpress.

Looking into your site now.
Thank you,

Brian McDonald DTM
Silver and Wiser Online Toastmasters Club #777940

Technical Support Consultant for FreeToastHost
The topic has been locked.
Moderators: BrianHeniPamrhtaylor3NotLiableNSBjgavinLcala305peterb323DebbieT
Time to create page: 0.135 seconds