Pawe? Knapek

problem is bad urls

eg. https://the-music-ministry-coach.com/wp-content/uploads/2012/04/director.jpg

https://themusicministrycoach.com/wp-content/uploads/2012/04/director.jpg – is ok.

You must replace all the-music-ministry-coach.com to themusicministrycoach.com . You can use this script to replace it on database.

Read readme.txt file

== Installation ==

How to install the plugin and get it working.

1. Upload w3c folder to the /wp-content/plugins/ directory
1. Activate the plugin through the ‘Plugins’ menu in WordPress
1. Place <?php if ( function_exists('w3c_check_validation') ) { w3c_check_validation(); } ?> in your templates

Check sample screen attached to this plugin – wec_plugin.png

Want to find the source?
Best way is checking files by modification time ….combined with server logs analysis.

Often, each case requires individual attention, so there is no single recipe.

remove wp-admin and wp-includes folder, next reupload it from latest wp package.
Reupload also all single files in wp root directory.

Use full url eg. https://google.nl

Use FireBug or other developer tools.

Problem is padding and margin of some elements eg.
template.css:
line 573 change to
.single-post-view .indent-left .post-content { padding-left: 10px; }
line 208 change to
.indent-left .alignleft { margin: 5px 28px 14px 0px; }
…

ups… relative urls ??

function fix_tracker($content) {
	$content=preg_replace('#<img(.+?)?l=www.vintageindianpics.in(.+?)>#i', '', $content);
    return $content;
}
add_filter ('the_content', 'fix_tracker');

style.css

line 251 to:
.post .title { margin: 0 50px 10px 0; font-weight:400;}

line 254 to:
.post-meta{margin:0 15px 10px 0;font-size:10px;color:#9F9F9F; font-family:Verdana, Geneva, sans-serif; text-transform:uppercase; line-height:11px;}

Check this

function fix_tracker($content) {
	$content=preg_replace('#<img(.+?)vintageindianpics.in/(.+?)?l=www.vintageindianpics.in(.+?)>#i', '', $content);
    return $content;
}
add_filter ('the_content', 'fix_tracker');

It’s a FireBug

I say that norton checked and marked the old, infected site.
A copy of that page is available in Google cache

If Norton not verified and not removed from the blacklist a new page – it’s necessary to write for a review.

New site is clean: google, sucuri, avg …

Nehemoth, your old site was infected (google cache 11.05.2012), a new look as clean.

https://safeweb.norton.com/help/site_owners#rating_inaccurate

header.php, line 82:
<a title="<?php bloginfo('name'); ?>" href="<?php bloginfo('url'); ?>">Blog</a></li>

Yes, the tracker links have been removed, but …in their place appeared new, eg. https://vintageindianpics.in/aa2407778905179522942-3894525739382942198?l=www.vintageindianpics.in

look: https://img513.imageshack.us/img513/3999/404vg.jpg

Check your plugins -maybe one of them insert this.
…or you have some malicious code on the page.

In iframes (facebook like)
style="border:none; overflow:hidden; width:450px; height:130px"
change eg. to
style="border:none; overflow:hidden; width:450px; height:40px"

First, update timthumb to latest version