dnasserian

I’m with bluehost and they were able to let me know where that line of code was located and since it was on 4 WP index files (and did not affect the non WP installs) they said it was a WordPress issue and that there wasn’t much they could do besides send me some links.

Song, I went over the links and will be taking those steps. Unfortunately I will be out of town until Saturday night so I was seeing where I can get in a limited time with limited resources. I’m also a bit apprehensive since some of the steps can mess up years of work on my AngryWeb.net site.

Anybody familiar with that line of code or may know how to remove it. I have spent a good chunk of my day updating and removing plugins that showed up through “Threat Scan”.

This is what I’m getting:
eval(base64_decode('... bunch of junk code ...'));

It’s happening on 4 of my WP installs simultaneously.

This started happening after 3.2.1. Anybody else experience security issues after this install?

Is there something on my server that could populate the code automatically or is it likely somebody is going in after I clean it up to reinsert the code?

Seems to be the theme after the update. Kind of fixed it…

Oh and sorry, you can see it yourself at zombieworldwide.com

Reinstalled the latest version. Seems to be OK now.

I have deactivated the Contact Form and the problem went away. Should I just wait for an upgrade?

Worked like a charm. Thanks for the help!

I now have access to the myPHP admin from the old database. What is the best way to export it and import it onto a new server with a new domain?

Would the database be anywhere in the install folder? I just dragged the whole wordpress folder to my desktop before losing access via ftp.

I ended up just searching Google for the cached sites and copy and pasting then relinking all of the images from the new domain. Thanks for the advice on the SQL parts that I was missing!

I am having this issue as well. I lost tracking on 2 of my blogs.