Centopino

Yes, I tried a plugin at a time.
Hope this can be useful to someone:
Scan your website https://sitecheck.sucuri.net/ Malicious code name: “rogueads.unwanted_ads?1”
In the database look for: WP_wfIssues to search the files-core mod, these are the infected files of my site:

wp-includes/post.php ; readme.html ; wp-includes/post.php ; wp-includes/wp-vcd.php ; wp-includes/wp-tmp.php ; wp-includes/wp-feed.php ; wp-includes/class.wp.php ;

Absurdently, it seems that you need to fill out a form in block letter in 2017 on mysql aruba. Tomorrow I try to call them.
ps: I used 3 antivirus, the file that specifies which core files have been modified is most likely created by one of the 3 antivirus plugin.

• This reply was modified 7 years, 3 months ago by Centopino.

coffee was helpful: Thank you,
maybe I did it, but the guides on the internet seem to address you all to ask for money to companies that do this job.
In my case I have casually noticed a database table that indicates all the wordpressed or modified or added wordpress files.
After 5 hours of searching I found it and in a few minutes I recovered and deleted the files that did not have to exist, I also restored the file functions and another of my theme that the malicious code recursed me every time in auto. Summarizing i deleted 3-4 files and reset them as many.
After verifying that the virus is no longer present I changed my password and wordpress username, i changed the wordpress’s codes in config.php .
I took the virus very probably because I did not update the php.
One thing I still have to do:
How do I change my database password ??

Yes functions.php

I post it two posts above, click on “funcions.php”.
Thanks

I still have not succeeded ??

The file i have modified is located under the folder themes/mythema/funcions.php.
Thank you

Thanky you for the reply but i try and it does not seem to change anything.
I add

remove_filter( 'the_content', 'wpautop' );
remove_filter( 'the_excerpt', 'wpautop' );

immediately afterwards <?php
Right at the beginning of the page function.php of my theme linee 2 and 3.
Solutions?
Thanks