[email protected]

As I said, I’ve tried many virus scanners: WordFence, Bulletproof, ExploitScanner, Sucuri, etc. They all say they find no malware, but they are willing to take my money to remove the malware they can’t find, which doesn’t give me much confidence in them.

While I want to remove the malware, I don’t want to leave the invisible text in each post, so my big question is how to remove that.

By the way, when I run my web sites through all of the various virus scanners, none of them detect any malware. My web sites have not been flagged by Google or any other blacklists. My web server did contact me to say it had found some problems, but was completely unhelpful unless I was willing to pay them $300 per web site, which makes me want to change servers since I do not make any income from these WordPress sites.

Problem solved. I updated the plug-ins, but that didn’t help. Then I updated my theme. That worked.

Still problems but I’ll mark this resolved and open a new topic if I can’t solve them.

I can’t deactivate plugins because I can’t access the dashboard. So I backed up and deleted all plugins except akismet, which comes with WordPress. Didn’t work.

I switched to twentyeleven by changing its name to the theme I’m using. Didn’t work.

I can’t use Settings->Permalinks because I can’t get to the dashboard.

I’ll try removing akismet.

What do you know, that worked. I’ll redownload WordPress and install a hopefully uncorrupted version. I won’t mark this resolved yet as there may still be other problems.

This happened about two years ago and someone else created a program called fixfiles.php that found and fixed all the infected files on a web site. I still have that program, but for some reason it doesn’t work.

Instead, I searched every file folder on the web site for files dated 9/30/12, which is apparently when the infection took place, and then replaced those files with uninfected ones.

Assuming the site is clean, why wouldn’t the dashboard work?

https://americandreamcoalition.org
also https://adcblog.org/blog

Base64 could be on either or both, but I can’t find any.

Yep, that worked. Thanks, kperrohe. I don’t know why it didn’t work the first time.

Okay, I backed up the database from my cpanel. So I suppose I can wipe everything out and start over. It would be nice to find an easier solution.

BTW, how do I back up the blog using FTP? SInce I can’t access the dashboard, I can’t use the built-in backup. It would be nice to back it up in case I have to start all over somehow. But I don’t know what files to copy.