Here’s how we fixed a site infected with url.adsformarket.com malware.
According to publicwww, so far aprox. 15 sites are affected by url.adsformarket.com malware.
Need help? Let us clean your site.
1. First we cleared all JS files containing this malicious script.
2. Then moving to PHP files – search and replace the following strings with nothing:
<
<
Note: look for any adsformarket entries – make sure nothing is left behind.
3. If theme files or plugins can be retrieved from the source, that would be great – it’s always a good idea to start using fresh site elements.
4. Look for any backdoors hackers might’ve installed. Clear any PHP files from wp-content/uploads, manually check files located in the root directory.
tools you can use for this search and replace step: PowerGREP, grepWin.
Need help? Let us clean your site.
malicious URLs:
https://tom.verybeatifulantony.com/a.js
https://tom.verybeatifulantony.com/y.js
https://talktofranky.com/?p=
https://go1news.biz/sw/w1s.js
https://talktofranky.com/w_24.js
https://slow.destinyfernandi.com/same.js
https://dl.gotosecond2.com/talk.js?track=r&subid=547
https://snippet.adsformarket.com/same.js?v=3
https://scripts.trasnaltemyrecords.com/talk.js?track=r&subid=547
adsforbusines.com
step.adsforbusines.com/crandy?
url.adsformarket.com
url.adsformarket.com/go.php
snippet.adsformarket.com/same.js
track.adsformarket.com/for/hos?l0
track.adsformarket.com/t.js
track.adsformarket.com/spacy?
backrocklondon.com/?p=
traveltoscount.com/?p=
globallyreinvation.com
deliverblackjohn.com/?p=
globallyreinvation.com/?p=
Secondary malicious URLs:
speakwithjohns.com
https://fast.destinyfernandi.com/demos.php
blog.destinyfernandi.com
slow.destinyfernandi.com
fast.destinyfernandi.com
middle.destinyfernandi.com
track.adsformarket.com/for/hos?l1
0.backrocklondon.com/?p=
1.backrocklondon.com/?p=
2.backrocklondon.com/?p=
3.backrocklondon.com/?p=
4.backrocklondon.com/?p=
0.traveltoscount.com/?p=
1.traveltoscount.com/?p=
2.traveltoscount.com/?p=
3.traveltoscount.com/?p=
4.traveltoscount.com/?p=
0.balanceforsun.com, balanceforsun.com, allow-space.com, urlin.us/islim, 1.specialthankselsa.com, specialthankselsa.com.
Try our Free site check.
