Hacked = Entire Site Italic… HELP!
-
[ Moderator note: email addresses redacted ]
My site was recently hacked two days ago. It is displaying all text as italic script. I cannot find the said font anywhere in the stylesheet and its not identified in Inspect Element.
I’ve had a mystery user appear in my user list everyday now for the past week – and it is set to an administrator role. Everyday, sometime different is either missing, changed, or gone. And just two days ago the italic script started happening.
I checked the header.php file and did not see any odd script or divs. There are no open
<i>or<em>anywhere either.When I go in my database, there is a user with the name “Paula” that also appears, and I delete this as well as the . Mike is someone I hired months ago who did an absolutely terrible job on the site, I fired him and I’m afraid he is the hacker.
I called GoDaddy a bunch of times over the weekend and they helped me clean out my database, I changed all passwords, backed up the site, exported the database. I also signed up for Sucuri who did a comprehensive malware scan and cleanup. They did clean up the database however they weren’t able to find the cause or the entry point of the hacker.
Today I called Godaddy to do an IP tracker and i found 2 questionable IP addresses, one from Bangladesh and the other from Brazil. The problem is that Sucuri and GoDaddy’s equivelant service SiteLock both scan for malware – it isn’t able to pinpoint hacker code… because even though Sucuri cleaned up my site and the database, and I changed all the passwords, it didn’t stop this asshole from hacking some more… gandu appeared again hours later.
I dont know what to do. I reinstalled a clean version of wordpress on another database in a sub-folder, and reinstalled the plugins and theme, and even tried backed up themes from almost 2 weeks ago, and the font is still italic script.
Please help! I dont know what else to do…
- The topic ‘Hacked = Entire Site Italic… HELP!’ is closed to new replies.