[resolved] Some code is displaying on top of all my pages (7 posts)

  1. CarlosMezo
    Posted 3 years ago #

    This code is displaying on the top of all my pages:
    #74ed9f# if(empty($ygxeb)) { $ygxeb = " "; echo $ygxeb; } #/74ed9f#

    It did appear once time ago and I kill it updating the theme Hatch. but now there is again, and no new updates, so it keep showing.
    Ive search this code in all mi php pages, and I didnt found it.
    Also I reinstall wordpress 3.6

    Any help??

  2. CarlosMezo
    Posted 3 years ago #

    sorry, my web page is: http://www.carlosmezo.com

  3. CarlosMezo
    Posted 3 years ago #

    I think I just got hacked, I found in header.php Lot of missplaced text or code.
    Already solved!!

  4. mznbg
    Posted 3 years ago #

    Hi , same problem, but I use Joomla.
    Since 2013-08-28 on all my public-html webspace and there under the joomla template-folders every "index.php" have this new code inside (scroll down).
    I have all lot of domains and subdomains, to change or kill this code manual is a lot of work.
    So my question is:
    1. Why only the index.php
    2. What does this code.
    3. How is this possible (Because not every joomla-folder have a domain or subdomain which can be found by searchmachine and so on, so the server must be attacked ?).
    4. How can be included the code to the index.php?

    Here the code which I have found in the index.php

    [Code moderated. Please do not post hack code blocks in the forums.]

  5. esmi
    Forum Moderator
    Posted 3 years ago #

  6. voracity
    Posted 2 years ago #

    Hmm, my site just got attacked too. If you search Google with '74ed9f':


    This seems to be a pretty recent and widespread attack. Would really like to know how the attack is being carried out so I can make sure to prevent it happening again.

  7. Polundra
    Posted 2 years ago #

    I did clean install the day before yesterday and was hit also running WP3.6. All header.php files in three different LEGAL templates.
    Each of them had this extra code added:

    [hacked code removed - please don't post that here]

    Google for #74ed9f# +wordpress many hits will follow. I just removed my site from internet after creating a local backup.

Topic Closed

This topic has been closed to new replies.

About this Theme

About this Topic