oct4v3

On Settings-fields.php files
I just edited Line 87:

    $items = array(
        '1' => __( '1 Day', 'wp-auto-republish' ),
        '2' => __( '2 Days', 'wp-auto-republish' ),
        '3' => __( '3 Days', 'wp-auto-republish' ),
        '30'   => __( '30 Days (1 month)', 'wp-auto-republish' ),
        '45'   => __( '45 Days (1.5 months)', 'wp-auto-republish' ),
        '60'   => __( '60 Days (2 months)', 'wp-auto-republish' ),
        '90'   => __( '90 Days (3 months)', 'wp-auto-republish' ),
        '120'  => __( '120 Days (4 months)', 'wp-auto-republish' ),
        '180'  => __( '180 Days (6 months)', 'wp-auto-republish' ),
        '240'  => __( '240 Days (8 months)', 'wp-auto-republish' ),
        '365'  => __( '365 Days (1 year)', 'wp-auto-republish' ),
        '730'  => __( '730 Days (2 years)', 'wp-auto-republish' ),
        '1095' => __( '1095 Days (3 years)', 'wp-auto-republish' )
    );

Is this correct? I didnt add anything in functions.php file of current active theme, will this work?

Thanks

OK Guys. It is solved now.

This is what I tried and Made it possible:

Firstly if you hit with same Spam, goto this link
http://aw-snap.info/file-viewer/?tgt=(YOUR PAGE URL)&ref_sel=Google&ua_sel=ff&fs=0&chk-cache=yes
and Replace (YOUR PAGE URL) with your link, e.g http://aw-snap.info/file-viewer/?tgt=http://www.example.com/spamedpage&ref_sel=Google&ua_sel=ff&fs=0&chk-cache=yes

Once done, see the code carefully, if you were hit with same as my spam, than you Probably have this issue:
<!–googleoff: snippet–> <!–googleon: snippet–> and that is bad news, but nothing to worry.

Goto google search and type: site:example.com casino
You will see many links which description is spammed.

Little Info:
The code for this hack is hidden in an “image” file typically a .png or .jpg and inserted using an include statement <?php include (‘images/?????.png’); ?>. The path/filename will be “engineered” to fit the structure and filenames of the site.
OK To date this hack is attacking WordPress sites but it could be used on any PHP based CMS.
Or The second technique is WP specific, the code is inserted in the database, typically the wp_options table. (I Tried, found nothing)

Now, if you using wordpress as me, install WordFence http://wordpress.org/plugins/wordfence/ or search wordfence from you live site plugin search and install.

Than goto options and tick check options below:

*Scan theme files against repository versions for changes
*Scan plugin files against repository versions for changes
*Scan image files as if they were executable

Now, goto SCAN and start the scanner. Once wordfence done with scan, Look for wordfence warninings where it says,
“This file appears to be malicious”
Now, in all found files, do “Delete this file (can’t be undone). ” found at end.

Now, goto Google Webmaster Tools, Select your current site, goto Crawl, than goto “Fetch as Google”, than input one url eg. “spamedpage” next to your domain name and click on FETCH button, once done, it will show you Fetch Status as Success with Green tick, click on that link and CTRL+F to search for string, and input, “googleoff” and you will see it is not there anymore in result of page, because this spam code is only visible to Google User Agent which is Google bot.

So, now you are clean, go back with the Back arrow, and submit that link to Google. It will 24-48hours for results/cache to be updated in google index for your link, so Relax.

Do, this for all the urls you found with site:example.com casino One by one

I hope it helps.

My results are here:

=======================================================================
Before FIX result:
=======================================================================
<link rel=’shortlink’ href=’http://wp.me/P4cuyl-121&#8242; />
<style>
.ts-fab-list li a { background-color: #fff; border: 1px solid #B2D4FF; color: #333; }
.ts-fab-list li.active a { background-color: #F9FEFF; border: 1px solid #B2D4FF; color: #fff; }
.ts-fab-tab { background-color: #ffffff; border: 1px solid #B2D4FF; color: #838383; }
</style>
<div id=”37lh0j”><!–googleoff: snippet–>Connect your casino account with online casino australia by login with credentials and start placing bets.
The play video poker games online for free gives percentage bonus in the form of chips to the players.
Play in our casino to get the benefits of fastest withdrawal & best response.
The new players will definitely receive the http://www.everenergy-cottbus.de/?p=online-slot, while creating the account.
<!–googleon: snippet–> <script type=”text/javascript”>document.getElementById(“37lh0j”).innerHTML = ”;</script> </div><script type=”text/javascript”>
<!–
/******************************************************************************
*** COPY PROTECTED BY CHETANGOLE.COM/BLOG/WP-COPYPROTECT version 3.0.0 ****
******************************************************************************/
function clickIE4(){
if (event.button==2){
return false;
}
}
function clickNS4(e){
if (document.layers||document.getElementById&&!document.all){
if (e.which==2||e.which==3){
return false;
}
}
}
=======================================================================
After FIX result:
=======================================================================
<link rel=’shortlink’ href=’http://wp.me/P4cuyl-121&#8242; />
<style>
.ts-fab-list li a { background-color: #fff; border: 1px solid #B2D4FF; color: #333; }
.ts-fab-list li.active a { background-color: #F9FEFF; border: 1px solid #B2D4FF; color: #fff; }
.ts-fab-tab { background-color: #ffffff; border: 1px solid #B2D4FF; color: #838383; }
</style>
<script type=”text/javascript”>
<!–
/******************************************************************************
*** COPY PROTECTED BY CHETANGOLE.COM/BLOG/WP-COPYPROTECT version 3.0.0 ****
******************************************************************************/
function clickIE4(){
if (event.button==2){
return false;
}
}
function clickNS4(e){
if (document.layers||document.getElementById&&!document.all){
if (e.which==2||e.which==3){
return false;
}
}
}