sladeetal

All that happens is the page attempts to load and becomes blank with my URL at the top: http://www.newfashionstrends.com/

Do you know how to fix the update problem?

My host told me that my site was hacked.
this is the message they sent.
Bravenet Web Services Support [Nathan – PHP/MySQL Support Technician] June 29, 2012 09:26:15
Was this reply helpful?
Dear David Slade,

wp-admin/index.php loads wp-admin/admin.php, that loads wp-admin/includes/update.php, which stops [Perhaps a bug in the obfuscated most likely malicious code]. (Also a bit concerning that it’s running that malicious file everytime wp-admin is accessed)

Replacing wp-admin/includes/update.php should get the logins working again.

I will be doing a review of the other sites later today, to ensure that malicious code has not spread elseware. Note that there could be more malicious code then what I have found though.

As for locating the files, if you login with a sftp client such as filezilla they will all be in the web/healthcareways.com folder.

the following can be safely deleted:
wp-admin/includes/0.php
wp-admin/js/0.php
wp-content/themes/premiumnews/cache/*
wp-content/themes/twentyten/sidebar-header.php
wp-includes/js/js.php
wp-includes/js/tes.php
wp-includes/_mail.php
wp-includes/0.php

The following should be replaced (or deleted).
wp-admin/includes/update.php (Can be found in wordpress 3.3.2 via http://wordpress.org/). wp-admin will not work until that is done.

.qidb: not part of wordpress, or any wordpress plugin I am familiar with. The files inside look suspicious to me. At the very least, I would rename this to something like unknown.qpid until you can confirm if you need that or not. [it’s either part of a wordpress plugin (I doubt it), or part of the malicious code (most likely)]

But until timthumb is removed/updated (Part of the premiumnews theme), this will happen again when the site is reactivated. [also could be reinfected by any of the backdoors]

(I know I gave the same info on the last ticket, just wanted to summarize it better)

I tried resetting the plugins folder but that doesn’t work neither.

Ive uploaded the new 20 11 folder but i still can’t get access to word press.

I renamed premiumnews to premiumnews-old.

Hi i tried renameing the theme and resetting the plugins but nothing helped. Do i need to reupload all the files and try again?

I have just installed the site and made some changes but i don’t have a recent database backup.