Forum Replies Created

Viewing 15 replies - 1 through 15 (of 26 total)
  • Thread Starter AngieL

    (@angiel)

    Just for anyone experiencing the same problem: the hack was actually in my database files that somebody hacked – my host provider fixed this for me!

    Thread Starter AngieL

    (@angiel)

    Okay, I’ll go with that. Thanks alot for all your help!

    Thread Starter AngieL

    (@angiel)

    Oh okay, – yes I started using wordpress’ on theme tentytwelve but would really like to use the weaver II theme as it is much better for my needs, I was just wondering if there maybe was some cache stored somewhere on my server for the weaver II theme and that was why the links showed.

    Thread Starter AngieL

    (@angiel)

    I have deleted it but am not sure hos to revert back?

    Thread Starter AngieL

    (@angiel)

    I searched for it on Themes in my admin area.

    Thread Starter AngieL

    (@angiel)

    Okay, thanks alot! So I completely removed the whole WP directory and SUCCESS..no more links…which made me really happy. I then reinstalled the theme that I had used (Weaver II) and the links were back…weird enough the theme that I installed still used the same settings, banner etc. I had removed the weaver_II theme folder from the wp directory so I don’t know why it still remembers my settings and stuff?

    (Don’t know if this is wordpress related or if i should ask at the weaver II forum?)

    Thread Starter AngieL

    (@angiel)

    esmi: yes, it was created after the hack took place.
    Does deleting the wp-admin, wp-content and wp-include remove my posts? I can’t figure that out based on the links above…:/

    Thread Starter AngieL

    (@angiel)

    esmi: Like I wrote in the post I have read all the links posted here, but it doesn’t say anything about the .xml files being infected as well and whether that will affect the new version.

    Thread Starter AngieL

    (@angiel)

    I know, but I really don’t know what else to do if I don’t want to lose my posts? The malware code is now gone and I want to delete the WHOLE WP-directory but I’m afraid it will keep coming back if the links are imported again through my .xml ….?

    So that is really what I am wondering, because if I delete the whole WP directory than all my posts etc will be gone, right?

    (please let me know if I am being unclear)

    Thread Starter AngieL

    (@angiel)

    Okay, so now I have really looked through anything I can find on this matter and my server provider told me that I could export all my posts etc. and then just completely remove EVERYTHING (which is also a tip on the links above – again, I must emphasize that I have gone through them all). So I downloaded an .xml file of my website and I started looking through it and saw that somehow the codes are ALL OVER the .xml file too, so it seems they are in my posts as well not the bad malware code, but this one:

    <!--maincontentstarts-->
    <div><a href="http://akmovie.org" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','http://akmovie.org']);" target="_blank" title="akmovie.org" style="position:absolute; left:-5873px;">akmovie.org</a> <a href="http://candownload.org" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','http://candownload.org']);" target="_blank" title="here" style="position:absolute; left:-5690px;">here</a> <a href="http://copymovie.org/" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','http://copymovie.org/']);" target="_blank" title="More Bonuses" style="position:absolute; left:-3950px;">More Bonuses</a> </div>
    <p><!--maincontentends--></p>

    SO I am thinking that even if I delete the whole thing, importing my .xml file with my posts etc. back on would still make the bad links appear, right?

    I have A LOT of posts (been blogging since 2005) so going through them all would be very time consuming. Would it help if I removed the bad code from the .xml file?

    I am very frustrated with all of this and it really seems my only option at this point is to lose all my old posts and start from scratch but I really don’t want to do that as I have a lot of memories on my blog. Please help 🙁

    Thread Starter AngieL

    (@angiel)

    I fixed this, but for anyone facing the same problem I asked my server provider for help and they said that the file was too big for one of their mod_security rules so he disabled that and it worked!

    Thread Starter AngieL

    (@angiel)

    Edit 2: I tried just exporting one category for one month and it worked! However, I really want to export everything with posts, categories, comments etc…

    Thread Starter AngieL

    (@angiel)

    Edit: I have tried unactivating all plugins, both on WordPress (through ftp and admin area) and my web browser and I have also tried re-installing core files wp-admin & wp-include through ftp.

    Thread Starter AngieL

    (@angiel)

    esmi: I did, I followed this one: http://codex.wordpress.org/FAQ_My_site_was_hacked and removed all the files from the director (wp-include and wp-admin + restoring some files in wp-content) and then installed a fresh copy of WP but still no change.

    Thread Starter AngieL

    (@angiel)

    Okay, I see! I’m not sure what delouse means though (hope u bare with me I’m just a hobby blogger with not much knowledge of these things and expressions =/) ? Do you mean exporting all my files, removing all WP files and then reinstall everything?
    Are there any tutorials for that what you mean I should do?

    Thanks for all your help you guys, it’s really appreciated!

Viewing 15 replies - 1 through 15 (of 26 total)