I have gone through Chris Pearson's guide to removing the Pharma hack. I find the database entries but I do not see any hacked files in the plugin directories or any directories for that matter. When I remove the database entries the hack goes away for a day, but then it comes right back.
Does anyone have any good ideas on things to search for?
I am running WordPress 3.0 and have manually reinstalled all of my plugins.
Help Please!
I found a company called Sucuri and ended up paying them to remove it for me.
I highly recommend them.
They also have an article on how to remove it.
http://blog.sucuri.net/2010/07/understanding-and-cleaning-the-pharma-hack-on-wordpress.html
jasonistaken
Member
Posted 1 year ago #
This is marked as resolved, yet there's no resolution posted. If you could offer some enlightenment as to how you came about to your solution, please do say so.
@jasonistaken -- jeya1's second post wasn't showing at the time you wrote this, but it is now. Hope it helps.