Jorge

Good news, it’s gone.

Strange though. After the fresh upload, I saw said iframe in the wp-admin area. I left the office to visit my designer and we checked it out on his Chrome browser, no iframe.

I use PC, he uses Mac – I don’t hold it against him.

I returned to my office computer and cleared the cache on my Chrome browser and the iframe is gone. Since the beginning, the iframe would pop up in different areas within the theme and the wp-admin area, but after a good run through, it appears the site has been sanitized from the infection.

I’m going to change the PW just for good measure.

Did you delete the files AND change your password AND scan your wp-config.php and .htaccess for possible violations?

Did you remove EVERYTHING in wp-content (except for the /uploads/ folder)?

Did you change all your passwords?

Yes, just finished another install with a fresh database.

Went to the wp-admin area, and nothing. I went to the Manage Themes page and bam, it’s there.

I’m using Chrome – I right click and click on “Inspect Element” – the iframe is there.

iframe id="iframe" style="width: 1px; height: 1px; " src="http://counter-wordpress.com/frame.php" /iframe

View source shows nothing but that’s a given. This is driving me bonkers.

EDIT: If the malicious script was in the DB, it would not have been an issue because like I said, it was a fresh install with a new DB with different passwords, etc.

I use this code in a plugin for stuff like that. What I would do is add either a footer navigation or header navigation. the problem with the header nav is that wp already has a navbar if the user opts for it in the dashboard.

i activate it network wide but it works on both single install or network.

function the_wp_header_html () {
echo ‘
<style type=”text/css”>
// style up your navigation
</style>
‘;
}
function the_wp_footer_html () {
echo ‘Add your HTML, Javascript, PHP, or other code’;
}
add_action (‘wp_head’,’the_wp_header_html’);
add_action (‘wp_footer’,’the_wp_footer_html’);

OR are you talking about Menus (where you would edit the Menu from inside the main blog) and each user theme only supports the main site’s Menu?