Today I fixed a site infected with top.worldctraffic.com malware.
According to publicwww, so far aprox. 2894 sites are affected by top.worldctraffic.com malware. This is a good indicator that this malware was propagated a while ago ( several weeks ).
Need help? Let us clean your site.
Note: Make sure you backup everything before attempting to perform a cleanup.
Quick steps:
1. First thing I noticed was the site URL and home were altered.
To reset site URL, check this article: https://wordpress.org/support/article/changing-the-site-url/
If you can edit wp-config.php file, add this code ( replace example.com with your own domain name ).
define( 'WP_HOME', 'http://example.com' ); define( 'WP_SITEURL', 'http://example.com' );
2. Second make sure all core files, plugins and themes are overwritten with fresh content.
3. Lastly make sure there are no cross-site contamination risks.
Try our Free site check.
Malicious URLs:
http://js.greenlabelfrancisco.com/touch.js?/femp.js?tt=1&
http://www.44tele-infra.com/js/80363.js
https://top.worldctraffic.com/cas?/t.js
https://clicks.worldctraffic.com/clizkes
http://track.adsformarket.com/for/hos?
https://js.greenlabelfrancisco.com/clizkes
https://dl.gotosecond2.com/clizkes
https://land.buyittraffic.com/clizkes