Moderator
Jan Dembowski
(@jdembowski)
Forum Moderator and Brute Squad
The link is http://www.myanimeblog.com
I found why that iframe keeps coming, but it keeps returning everytime I remove it….
Moderator
Jan Dembowski
(@jdembowski)
Forum Moderator and Brute Squad
That lins coming up down for me.
It could be your theme, a plugin, or you may just be hacked.
I found why that iframe keeps coming, but it keeps returning everytime I remove it….
That makes me think it’s a hack. Have you found it or have you found what’s adding it? Two different things and if it’s getting put back then I’m leaning towards a hack.
Yes, there’s this just above the index.php of root and the theme:
[Code moderated. Please do not post hack code blocks in the forums. Please use the pastebin]
And also 2 files appeared with the same stuff in the map wp_content; 513.php and vspxws.php
Moderator
Jan Dembowski
(@jdembowski)
Forum Moderator and Brute Squad
Looking at the cached copy on Google, it looks like you are using
http://www.elegantthemes.com/gallery/glow
If you can login to that vendor’s site and get a fresh copy of that theme. The one you are using has been viscously hacked. Go through all of those link above because you need to delouse your installation.
If you did not get that theme from the commercial vendor then lose that theme. No really, switch to another theme and delete that one and delouse your site.
The people who added that are abusing you and are doing Very Bad Things™ to your site. By running that code you are helping them get link juice that they are being paid for. They’re being paid not you.
Either way you’ve a lot of work ahead of you. 🙁
