Support » Fixing WordPress » Hacked = Entire Site Italic… HELP!

  • [ Moderator note: email addresses redacted ]

    My site was recently hacked two days ago. It is displaying all text as italic script. I cannot find the said font anywhere in the stylesheet and its not identified in Inspect Element.

    I’ve had a mystery user appear in my user list everyday now for the past week – and it is set to an administrator role. Everyday, sometime different is either missing, changed, or gone. And just two days ago the italic script started happening.

    I checked the header.php file and did not see any odd script or divs. There are no open <i> or <em>anywhere either.

    When I go in my database, there is a user with the name “Paula” that also appears, and I delete this as well as the . Mike is someone I hired months ago who did an absolutely terrible job on the site, I fired him and I’m afraid he is the hacker.

    I called GoDaddy a bunch of times over the weekend and they helped me clean out my database, I changed all passwords, backed up the site, exported the database. I also signed up for Sucuri who did a comprehensive malware scan and cleanup. They did clean up the database however they weren’t able to find the cause or the entry point of the hacker.

    Today I called Godaddy to do an IP tracker and i found 2 questionable IP addresses, one from Bangladesh and the other from Brazil. The problem is that Sucuri and GoDaddy’s equivelant service SiteLock both scan for malware – it isn’t able to pinpoint hacker code… because even though Sucuri cleaned up my site and the database, and I changed all the passwords, it didn’t stop this asshole from hacking some more… gandu appeared again hours later.

    I dont know what to do. I reinstalled a clean version of wordpress on another database in a sub-folder, and reinstalled the plugins and theme, and even tried backed up themes from almost 2 weeks ago, and the font is still italic script.

    Please help! I dont know what else to do…

Viewing 7 replies - 1 through 7 (of 7 total)
Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Hacked = Entire Site Italic… HELP!’ is closed to new replies.