WordPress.org

1. samisam
   Member
   Posted 10 months ago #

   Hey everyone,

   I've been battling this annoying spyware/malware that's hijacked my site. All it does is redirect you to http://continue_.s3.amazonaws.com/index.html?AWSAccessKeyId=bla bla ... either way, the redirect is being done via a short link "http://bit.ly/oqUl1M" .. I cannot find the code for the life of me and have spent close to two weeks doing this. Can someone PLEASE shed some light on to this? any direction, help, whatever, will be highly appreciated.

   here's the link: http://www.shadyslimo.com

   thank you

2. songdogtech
   Member
   Posted 10 months ago #

   See FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex and tell your host. Change all passswords. Scan your own PC. Some plugins might be useful: Search for "security" « WordPress Plugins

3. samisam
   Member
   Posted 10 months ago #

   that won't do any good. i've had issues similar to this in the past and i've taken care of them easily but this one is just hard to figure out. any assistance someone?

4. dd@sucuri.net
   Member
   Posted 9 months ago #

   This is the problem you have:

   http://blog.sucuri.net/2011/07/the-danger-of-remote-widgets-feedcat-net-sold-and-now-distributing-malware.html

   Related to feedcat.net that got sold...

5. samisam
   Member
   Posted 9 months ago #

   I contacted the developer last week after It turned out to be feedcat. he did say that he took care of the issue and "ASSURED" me that this would never happen again. any comments?

6. NissNass
   Member
   Posted 9 months ago #

   Tomthumb.php was a problem. Check this out:
   http://techspheria.com/2011/08/phpremoteview-hack-what-it-is-and-how-to-remove-it/

Reply

You must log in to post.