Virus Infection

Start here – https://codex.www.ads-software.com/FAQ_My_site_was_hacked

Should the links to the infected sites remain in the post?

Thanks for adding the modlook tag, but please see https://codex.www.ads-software.com/Forum_Welcome#Reporting_Threads

Finding the same problem with one of my sites. Discovered after looking into why the feed wasn’t updating in Google Reader. It comes up on several scans, but I can’t seem to see it myself when looking at the source on the webpage, or looking in the index.php file (as someone in this thread did). I’ve reinstalled wordpress (the easy way through the updates menu), and it remains.

I’m running an Automattic theme (coraline) and only have three plugins running (Akismet, Jetpack by WordPress.com, and WP Super Cache), all extremely reputable.

I’ll post a link to the site if that’s deemed kosher. I have scanned my computer (running OS X 10.7) and it is clean.

What I don’t understand is how this code got on the website, and why I can’t see it.

Any help is very appreciated.

EDIT: Just discovered something. The code does not appear on the site when I am logged in. This explains why I was not able to see it in the source.

@ daboo

Your infection may also becausing your site’s memory issue(s) as well.

Check your site(s) here:
1. https://sitecheck.sucuri.net/scanner/
2. https://www.unmaskparasites.com/
3. https://www.virustotal.com/
4. https://www.phishtank.com/
5. Google Safe Browsing (to access a site’s google info, add their domain to the end of this):
https://www.google.com/safebrowsing/diagnostic?site=
example:
https://www.google.com/safebrowsing/diagnostic?site=example.com

Backup everything and put that backup somewhere safe.This is in case you have problems later on. Even though you could be backing up infected files, it is more important to have a backup up of your work, for if you make a mistake cleaning your site, you will still have the backup(s).
1. https://codex.www.ads-software.com/WordPress_Backups
2. https://codex.www.ads-software.com/Backing_Up_Your_Database
3. https://codex.www.ads-software.com/Restoring_Your_Database_From_Backup

Then read these:
1. https://codex.www.ads-software.com/FAQ_My_site_was_hacked
2. https://www.ads-software.com/support/topic/268083#post-1065779
3. https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
4. https://ottopress.com/2009/hacked-wordpress-backdoors/

Once your site is clean, then read this:
https://codex.www.ads-software.com/Hardening_WordPress