nicksmolinske

Thanks for the advice. All scan tools have run clean, and I haven’t found anything poking in the code myself.

After talking with some friends who fix computers for a living, it sounds like it’s common for ransomware to lie in wait for a little while and then activate when visiting a random site – that way it’s harder to trace where it came from. Still sucks for my customer, but I think I’m in the clear.

So my fix turned out to be reverting to WP 4.4.2… given that I’d prefer to be up-to-date that’s not ideal. But I got it working with WP 4.5, here’s how:

In my case it was the issue of WP4.5 updating jQuery, which changed the syntax jQuery accepts, jada jada. Here’s my suggestion to fix it:

1) Update your plugins, every plugin. uninstall any old ones hanging around that you don’t use
2) Update your theme if it’s not custom
3) Download a copy of your public_html folder to your computer if you don’t have one already
4) Search through that for any files containing the phrase a[href*=#
5) Replace those with the syntax a[href*=”#” – so just add quotes around the hash mark

Updating my plugins fixed a lot of my issues but not all of them. When I searched I found a couple copies of the old syntax in my theme and replaced them. So far that seems to have fixed everything.

Huh – good point and thanks for posting. I was under the impression that they had reinstalled 4.5, rather than downgrading back to 4.4.2. But sure enough, they did downgrade my wordpress.

I’ll wait a few weeks and do more research and then try upgrading to 4.5 again, rather than risk more website downtime right now. That’ll give plugin developers time to upgrade.

I’m a little confused though, since the WordPress admin panel wasn’t working for me. That seems like neither a theme or a plugin problem to me.

I had this issue. I use bluehost so I contacted their live chat support and they reloaded the WP core files. Then I refreshed the admin page and it prompted me to rebuild the database. That fixed all my issues.

Fixed! I got on the live chat with bluehost and they replaced the wordpress core files. After that I reloaded the admin page and it prompted me to rebuild the database. Now the site seems fully functional!

More symptoms! When I go to my order list in woocommerce, under the “Purchased” column it shows how many items were purchased. Normally I can click this and it will show the items that were ordered – right now it also does nothing. Also, when I go to edit a page, clicking the “text” button to switch to text from visual editing does nothing. So it might be a general javascript issue of some kind? Should I be contacting bluehost? Seems like it’s not a woocommerce issue after all.

I had another thought – to add a new product. But that is also broken. When I try to add any product attributes, the “Add” button does the same thing as the “Ok” button in the variations – AKA nothing.

Now I’m stumped for the moment, but I’ll continue to google. If I uninstall and reinstall woocommerce would that delete my products? I imagine they’re safely stored in the database but I’d like to be sure.

Ok, more information: When I go to a product I cannot do anything with the variations – When I select any options from the drop-down menu (such as “delete all variations”, or “Set regular prices”), nothing happens when I click “Ok”. So my idea of deleting the variations and redoing them won’t work. I tried resetting a product to “Simple Product” and then back to “Variable Product” (clicking Update between the changes), but that didn’t remove the variations or change anything.