Website flagging up malware
Discussion
Due to a tight budget, I've had to have a site for presence purposes only, built from freelancer to show what I do. The problem I'm having is, the hosting company picks up malware from the site but the Dev is adamant there's no problem on his side.
Being in the startup stages (the site's literature isn't fully finished yet) funds are tight as I look for clients to complete projects with.
Can an experienced person here maybe tell me what exactly is causing this issue, as I'm at a loss as to where the issue is? I can't start giving out the URL to potential clients until this is fixed.
Please ignore the literature on the site, as a lot of that is in the process of being changed by myself as it's not 100% correct.
Thanks in advance.
Being in the startup stages (the site's literature isn't fully finished yet) funds are tight as I look for clients to complete projects with.
Can an experienced person here maybe tell me what exactly is causing this issue, as I'm at a loss as to where the issue is? I can't start giving out the URL to potential clients until this is fixed.
Please ignore the literature on the site, as a lot of that is in the process of being changed by myself as it's not 100% correct.
Thanks in advance.
Does not seem to be flagging up any immediately identifiable issues with the current site. It's also no blacklisted by Google etc which is a big positive.
It could be there are folders containing malware being hosted on the server on your account which are possibly not being used but being scanned internally. Have you got access to either WP or the host?
It could be there are folders containing malware being hosted on the server on your account which are possibly not being used but being scanned internally. Have you got access to either WP or the host?
My guess (Am not a web dev by any stretch) would be a dodgy plugin, I would try and disable your plugins one at a time and see if the warning goes away.
Especially if a premium version of a plugin has been used and acquired from a less than legitimate source.... They often have malicious code in,
Especially if a premium version of a plugin has been used and acquired from a less than legitimate source.... They often have malicious code in,
While you’re fixing it...
http://www.skelecom.co.uk/services/structured-cabl... 404 page not found
Young Vijay needs to sort that picture out on his website
http://www.skelecom.co.uk/services/structured-cabl... 404 page not found
Young Vijay needs to sort that picture out on his website
If you are using Krystal ask them for the log file as it will show you the issue right away. There is only one partially hidden link which goes back to the developer but it might be worth trying to find a new theme as this is really, really old and could be throwing up automated errors.
TotalControl said:
Much obliged chaps. I’ll look into it.
Yes, Freelancer is at the price for a reason I guess and they are hard work to manage. Didn’t realise the theme was old.
Just for the sake of an online presence, I was hoping this would be sufficient for the short term.
Good attitude, all too often people go in guns blazing when it’s just not needed.Yes, Freelancer is at the price for a reason I guess and they are hard work to manage. Didn’t realise the theme was old.
Just for the sake of an online presence, I was hoping this would be sufficient for the short term.
vdn said:
If it’s Wordpress; then have him (or you) install a plugin called “Wordfence”. The free install is great and will stop anyone trying anything. Amazing to get reports of attempted hacks and logins etc.
Do this. Also, is it actually malware, or is it just their scans saying you need to update plugins and stuff? Which malware is it picking up and at what URL?
If its still happening, I would take a look at the webform on your contact us page. I know there was an issue with certain WP themes which used Hybrid Composer.
Basically, the theme needs to be updated to the latest version, which itself incorporates the latest version of Hybrid Composer, in order to get around the malicious redirect that was possible due to a problem with older versions of this HC.
Perhaps that's your issue, could be wrong.
Basically, the theme needs to be updated to the latest version, which itself incorporates the latest version of Hybrid Composer, in order to get around the malicious redirect that was possible due to a problem with older versions of this HC.
Perhaps that's your issue, could be wrong.
951TSE said:
Not sure if it's any help for the guru's but my chrome browser is putting up an error of "Insecure content blocked. This page is trying to load scripts from unauthenticated sources".
Although the main site is loaded over https, it tries to load a couple of javascript libraries from elsewhere over plain http, so chrome is complaining about these and blocking them.Gassing Station | Business | Top of Page | What's New | My Stuff