IMHO; It is nice when experienced users can create templates, themes or programming to help others, but to offer something that has a capability to produce an undesired affect without full disclosure is not nice, and just, plain, wrong.
Thank you for explaining the detection process.
Would Layback Bear's link to AdwCleaner be a good start?
Anak : not in this case. It is for adware/plugin infections of PC/Browser , not website infection.
I wanted to make sure everyone had a chance to see this, that is why I posted again instead of an edit.
Go to: https://www.google.com/safebrowsing/...hemeforest.net, and see google's report.
thank you for the valuable support and expert opinions. Appreciate. It is definitely a fraudulent theme. However, I was able to detect the malicious code since my website does not redirect anymore, and there are no signs of the code in the loading process or DOM of the website.
Thank you
Just a question. Could that bad website left a little free goodie on one of anak's browsers or any place in his computer?
The reason I asked is when a website no mater who website is infected could it transfer the infection to the visitor of that website. No mater who the visitor is or is not. Or in a simpler way; if a website is infected is it possible to get infected as a visitor even if one doesn't tick on anything on that site. Just curious and thought that you or gied could solve my curiosity. If I upset anybody I'm sorry. I will go away and not bother again.
Layback Bear: it is possible, and trojan infection is likely in such cases.
However, if you get blocked access to website by your antivirus, there are poor chances to be infected. Never hurts to scan with second opinion scanners like hitman pro or similar.
However, it is not always the case. For example, the infected pages might be used for just promoting something illegal, or linking to some downloads (but not using exploit packs).
Quote