Both wp-adin/dashboard and my site is getting redirected to:
[Mod note - links removed]
Today, 04/14/2010 i logged into dashboard and it was crashed.
I tried to refresh many a times and it still was crashed,
and i saw this address running fast in the Task Bar:
[Mod note - links removed]
After sometime the dashboard started redirecting to bing.com mentioned above.
Changes i did today:
1. Uninstalled wp-united.
2. Uninstalled Phpbb.
3. Installed Beeline wp plugin.
4. INSTALLED wp plugin Tal.Ki (Tal.ki Embeddable Forums)
I came to know my site has been HACKED and googled few solutions.
1. Changed Wp Admin Password.
2. Changed FTP Password.
3. Saw this code in Page Source:
<script type='text/javascript'>
/* <![CDATA[ */
var thickboxL10n = {
next: "Next >",
prev: "< Prev",
image: "Image",
of: "of",
close: "Close"
};
try{convertEntities(thickboxL10n);}catch(e){};
var commonL10n = {
warnDelete: "You are about to permanently delete the selected items.\n \'Cancel\' to stop, \'OK\' to delete."
};
try{convertEntities(commonL10n);}catch(e){};
var wpAjax = {
noPerm: "You do not have permission to do that.",
broken: "An unidentified error has occurred."
};
try{convertEntities(wpAjax);}catch(e){};
var adminCommentsL10n = {
hotkeys_highlight_first: "",
hotkeys_highlight_last: ""
};
var plugininstallL10n = {
plugin_information: "Plugin Information:"
};
try{convertEntities(plugininstallL10n);}catch(e){};
/* ]]> */
</script>
<script type='text/javascript' src='http://indiangirlsclub.com/wp-admin/load-scripts.php?c=1&load=thickbox,hoverIntent,common,jquery-color,jquery-ui-core,jquery-ui-sortable,wp-ajax-response,wp-lists,jquery-ui-resizable,admin-comments,postbox,dashboard,plugin-install,media-upload&ver=b92e060c1632e7b2fe6ec9809056c0d0'></script>
<script type="text/javascript">if(typeof wpOnload=='function')wpOnload();</script>
<script src="[Mod note - links removed]/js.php"></script>5. Removed this code from Index.php and Load-Scripts.php :
<?php /**/ eval(base64_decode[Mod note - base64 code removed]"));?>
6. Uninstalled Tal.Ki Plugin.
Still my site is not clean.
It's getting redirected to :
[Mod note - links removed]
Site Url: http://indiangirlsclub.com
Please HELP me. I'm not a tech savvy. What else should i do ???
