Piyush Labs

Both /mylogin/.htaccess and /mylogin/public_html/.htaccess gets modified. Redirecting to random .ru websites.

How did i miss this post. I was searching all around for the solution.
Now, I found the wp-content\upload\_cache.php file with encrypted code and did some research.

<?php
preg_replace("/.*/e","\x65\x76\x61\x6c\x20\x28\x20\x67\x7a\x69\x6e\x66\x6c\x61\x74\x65\x20\x28\x20\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x20\x28'
.......
'\x29\x29\x20\x29\x20\x3b",".");?>

It decodes to

<?php
preg_replace("/.*/e","eval ( gzinflate ( base64_decode ('
........
')) ) ;",".");?>

Running it on server, you can see it in action : a real Backdoor.
This is just “one” example, there are many out there, with name other than “_cache.php” all due to this thumb.php lying there in some of my old inactive theme.

Tired of this hack, facing since last 3 months, but there was no problem in viewing the site. I finally erased everything last night, and now rebuilding it again, after my site got black-listed in Google search. ??

I faced the same problem while upgrading to 3.3
I renamed the w3-total-cache folder, and reverted back after Database upgrade.
Kudos to en3r0.

Thanks for the info guys.
I have combined all these info found on different forums and answered by various techies.
Its a bit long process, but it did work for me.

It works for me in the following way:
1. Setttings > Miscellaneous >
Store uploads in this folder : wp-content/uploads [for me, it was already there by default]
2. Organize my uploads into month- and year-based folders.
Unchecked the above item.(Not copulsion, but u have to change permissions of respective folders.)
3. Create the \wp-content\upload folder if it didn’t exist.
4. Do a “Fix File Ownership” from CPanel of 000webhost. (Keep this window open, coz u need to do this frequently.)
5. Using FileZilla(ftp client) CHANGE the permission of upload folder to 777. (Yes, till when you want to upload).
6. Use WP and upload the desired files. Once you are done with uploading of all files and do not want to upload any more proceed to next step.
7. Do a “Fix File Ownership” from CPanel of 000webhost. This will change ownership of the files generally of “99/99” type to “your-userID”.
8. Now, you will be able to change the file permission of ALL FILES inside Upload folder to 644.
9. Change back the file permission of Upload FOLDER to 755

NOTE: all folders should be 755 and
all files should be 644 to prevent unauthorize access to your files.
Please, Do not leave them writable by World.