Here we go again. New links popped up. Grrrr….This time I did a line by line comparison with the original header file and I think I got at least this file clean. What’s lurking elsewhere, I don’t know. The problem is, I’d modded this file fairly extensively. There was a bunch of animation most computers couldn’t handle, and some rather rude (I’m sure the coder thought it was funny/clever…I didn’t) comments when the animation didn’t work. So, I took all that out. I also put my copyright stuff that appears at the top of the page into it.
So why, you ask, don’t I have a copy of the uncorrupted file on my home computer somewhere? Well, I think I do, but I couldn’t find it. probably on the computer that died. Who knows? Anyway, I’ll be surprised if this fixes it. I’ve probably got some kind of link to the buzzards at the moment. But if it shows up again, I’ll see what I can do. Meantime…I’m working on security….
I found some suspicious stuff in my sidebar php file as well. I zapped it. Hopefully I didn’t zap anything significant. Please let me know if there are any problems logging in or anything like that.
And RoI languishes.
Pook.
You may have a mysql injection. You can google that term and find the fix. This type of thing happened to a WordPress blog that I host for a friend. If you determine that you have this type of hack, you will need to use phpMyAdmin to check out your mysql database and fix it.
Have you checked this site out:
http://ocaoimh.ie/did-your-wordpress-site-get-hacked/
Or this one:
http://wordpress.org/support/topic/271485
It sounds like you need to save everything off onto your computer. Clean all the weird stuff out of the code. Check the time stamps on all of your images assets and everything on your site and if something isn’t dated when you remember it should be dated it might be hiding in there and respawning. Once everything is cleaned out and you don’t see any weirdly dated assets put everything back up online and you might be in the clear. It is a good idea to keep WordPress updated and throw on some antivirus plugins too.
Here is a site that talks about “hardening up” your WordPress:
http://codex.wordpress.org/Hardening_WordPress
I looked at the code and it looks fine at the moment…
I’m monitoring it every half hour or so. When I went to bed last night, it was fine. Got up this morning and bam. More links. And different ones. Since I have no real idea what the code that I wiped out actually means…only that it didn’t belong there…I don’t really know if I got the root of the problem or not. Keeping fingers crossed….