tt22tt

I had the same problem. I needed to remove curl_exec from disable_functions in php.ini
This works with fcgid, too.

Is that now a security problem?

Thanks

Hi, i have installed this blog new, too. So it is now fine.
Wordpress-Export -> WordPress-Import into new folder and database and do all settings again. Now it is OK

Hi, sorry, I do not know which are the compromised files. I have reinstall the blog and now is all fine. The old files do I have in a backup folder. There are a lot of files with “filname.suspected” But I do not think that they are the real malware.

Yes, it redirect to other sites.
I do not think that I can scan with this keyword because normally the files are entcrypted. Are the not entcrypted?

Thanks!

I think that there is a bug in software because the software is using another sql-database table-structure which is different to the real one.