How to detect Malicious code in nulled or Free WordPress Themes and Plugins

[seoexperts]

I'm suggesting 3 more FREE Tools:

http://bestblackhatforum.com/Thread-GET-...E-Solution

[jungario]

AWESOME TUT sahydian Than you for your time and effort

[hop]

This is a great and 'SAFE' Tutorial. Thank you Sahydian!

[Kimi25]

Great info, but tell me how to erase that backlinks and codes?

I have iThemes Security Pro installed and add you rec. GOTMLS also TAC
is that enough?
I found TrojanDownloader.JS.avhq in one of my themes, how to delete this?

thanks

[linuxboyuk]

great tips. thanks for the share

[sjc999]

(10-24-2016 09:15 PM)Kimi25 Wrote:  Great info, but tell me how to erase that backlinks and codes?

I have iThemes Security Pro installed and add you rec. GOTMLS also TAC
is that enough?
I found TrojanDownloader.JS.avhq in one of my themes, how to delete this?

thanks

If you don't know programming your best bet is to change themes or just buy the legit theme - I would definitely get rid of that one real quick though.

[sjc999]

A good post, but I have one issue with it - the inclusion of Virustotal.

Don't get me wrong - I use virustotal often - but it is not a php scanner, it detects PC viruses - so I feel that including it perpetuates a myth we see here all the time - "here is a plugin - and look it's safe - here is the virustotal."

[DigiMarketer]

Thanks OP
Thank for sharing great article

[bhj8944]

Great info thank you
Reps added

[intrepid]

Jetpack plugin from the Wordpress team has Bruteprotect included. Wordfence is #1 security plugin and it scans EVERYTHING, including image files and files outside WP install (in Settings). AIO WP Security I avoid because if you change your login url it's difficult to access WP admin.

Yes, backups are good but NEVER install plugins or scripts that were shared or stolen because depending on the type of malware you are infecting ALL sites on a server, not just your own. I always buy from developer before installing scripts.