Anyone else getting virus warnings on the page? something about "JSCoinminer Website"? I have never had a issue before and have seen the pinned post about virus issues. but this is new to be. any info?
3D-LOAD.NET ... Down??
- Thread starter Esens424
- Start date
It seems strange to me that since yesterday the theme I was using before has started to give problems, now I put a new one but I don't know how to explain it, it's very slow when I use it, click response times are slow, above all it slows down the PC and the browser for no reason, I just did a virus scan of the server, but there are no viruses... moreover the server resources are fine, there are no anomalies...
I'm trying to disable all plugins, there is probably some inefficient plugin slowing down the site
Thank you I'm trying to improve the theme as best I can, the theme is one of the most popular so I don't think it is inefficient
- Jun 17, 2017
- 5,963
- 30,242
Did you check to see if your domain is still fully under your control? It sounds like there might be some shennanigans going on with the DNS server, i.e. some hackers may have hacked the DNS, intercepting some of your traffic before it actually directs to your own server. Might be worth a looksee/inquiry with whomever provides your domain services. That'd be my guess, DNS hacking seems to be all the rage right now...
Thanks for the advice, I'm currently using a cloudflare DNS server, how can I tell if a hacker attack is taking place? Do you have any tools to recommend?
Even now it uses 100 % CPU? my processor does not use 100 %, but when I use the site in admin mode it Chrome freezes sometimes, the problem does not occur if I try to log in as a visitor
- Jun 17, 2017
- 5,963
- 30,242
You'd need to ask cloudflare if they've been having issues. If your server is 'clean' then it could possibly be a DNS thing, hence my suggestion, maybe reach out to cloudflare support to see if your certificates are intact, etc.?
Someone else might have better info on how to check this.
tried now and it went up to 100%
"system interruption" if i check task manager.
im using win11 and chrome
but like the others have said
great new look on the site!
Very strange, i'm sorry... have you tried other browsers, devices? I don't think you are experiencing any attacks, but I am verifying
Maybe i found the reason, there is a crypto miner installed,? browsing the inspect element i found some suspicious stuff, "wasm" i'm not sure but i think it is a crypto miner... Can anyone verify that this is the case, if so how do I remove it?
Last edited:
I am trying to run a virus scan inside the server, so far it has found 8 infected files, I hope to be able to delete them
I found the guilty file, after doing a wordpress file integrity scan, I discovered that the index.php file had been modified without my knowledge, I have now set the files permissions to 644 and the folders to 755
- Jun 17, 2017
- 5,963
- 30,242
Yeah them hackers are pretty sneaky...
Hopefully you found the issue, and hopefully the permissions are now set to that this doesn't happen again... I'm not an expert on that, I'm reasonably sure that the F95Zone admin types might have a clue or two about such things though...