colvin

I’m fairly certain that Clayton is correct. My computer was first infected with siszyd32.exe, which somehow got into my computer [probably a “drive-by virus” picked up from a WP blog. I learned about the infection right away, I think, because WinPatrol reported this malware was trying to get into my start up folder.

WinPatrol won’t clean out this infection. Fastfixer also can detect it –and it claims to completely delete it. I’m not sure that it does a complete removal. I ended up reformatting.

Thanks re more info regarding the script that will clean the WP installation. I’ll work with my site admin to see how that works.

The malware has gotten into my WP-admin post functions. Avast suggest that any new posts will carry the virus and potentially infect my readers.

A work-around is to do my posts using the ScribeFire extension for Firefox.

The moderator of this WP Forum said that he has referred this problem to the WP Security Team. Hopefully, we will hear an official opinion and fix from them. They will probably reply to this thread — so keep checking it.

There seems to be, all of a sudden, a lot of “script injection.” I’m having trouble with 3 WP blogs hosted by Hostgator. It’s support team has been responsive, cleaning things up — but within hours problems return. They mention script injection in their reports back to me, with intimation that it’s happening a lot recently.

Re-alerting community to new virus attacking WP.

Re-alerting WP community about new vulnerability.

You may have been hit by the same malware that I picked up. I had the same problem. Avast seems to be most up to date about alerting users re this malware, but I don’t think it has a fix yet. See my earlier posts in last 24 hours on this issue by searching this forum for: JS:Illredir-B [Trj]

I appears that this virus is spread by blogs who pass on the malware via java script.

My blog administrator and I worked all yesterday cleaning out WP on my server. We had to delete a lot of plug-ins and the entire /js folder. Then I upgraded automatically from WP 2.7 to WP 2.9.1. Avast seemed satisfied, and the blog appeared on screen as it should [missing a couple of plug-ins].

BUT we have not yet found a way to repair the WP posting facility. Any time I try to post something, Avast identifies this Trojan.

Hostgator has been helpful, but the malware seems to be widespread there. And presumably it will not repair individual installations of WP.

Hope to get a final solution today.

I’ve had this exact problem. I use the Spotlight 1.3 theme, under WP 2.1. Increasingly the blog appears blank — and the Presentation Panel shows no theme selected. When I reselect the theme, all is OK, until the next occurence. Sadly, the frequency of this problem is increasing, from maybe twice a month to currently twice a week.

I tried switching themes, and the same problem reoccurs even with another theme.

HELP!

As I travel a lot, I sometimes go 2-3 days without checking the blog — and am disheartened when it comes of blank. I know that I am losing readership, down 25% over past 2 months, from 4900 unique visitors a month to 3500 — and I fear some of that is attributed to the blank screen problem.

Well, gosh. I tried to be clear. Anyway, thanks for yr help as I think you’ve solved my problem.

OK. Found ’em. Will upload back into my current installation and see what happens.

Hmmm, I think I understand. I should download and unzip WP 2.0.11, and just pull the two themes out separately and upload them. Correct?

I have found copies of updated Classic and Default themes that are bundled inside 2.3. I saved them over into my 2.0.11 installation, but they show up broken, without stylesheet.

Yes, I’ve been running 2.0.11 for months now.

Just visited the archive-release page. I see that the Classic and Default themes are not available separately, but are contained within the WP installation itself.

That’s my problem. I do not want to reinstall the earlier version just to retrieve the two themes.