Drumrocker365

UPDATE: I just scrapped the entire WordPress installation since my friend said he didn’t need it. I went and installed WordFence on every WordPress site I manage (thanks guys)! I discovered there were 2 scripts – it originated in an ownCloud installation (same type deal – in a very obscure folder), and then later a second script was put in theme_compat on WordPress. The spammer was posting to it from a mix of GoDaddy and BlueHost servers several times per minute, causing it to execute.

Thanks for all the info!

@supporthero

Thanks for the detailed reply. The version of WordPress was up to date. I’m not sure what plugins were on it, or many details about the install. I’m working on getting a backup of the website restored (the backup was before the malicious code was added).

How does one scan a server with Clamav? Sorry, I’m new to this.

If I can get that backup restored, I can PM you with a link to the files.

Hi,

Thanks for letting me know – I wasn’t aware of this.

Hi,

I saw the custom CSS option, but I’m wanting to import entire .css stylesheets. How would I do that? Also, I need to import .js files as well.

Hi,

I’ve updated to the latest version and am still facing the issue.

Hi,

I contacted my host and they said that my DNS was configured incorrectly. They have fixed the problem and everything now functions as normal.

Hi,

I disabled plugins 1 by 1 and nothing changed. I do not want to change my theme to twentyfifteen, as I do not want to risk ruining the configuration of my current theme.

Thanks,
Christian

I’m not sure why, but I guess the second time is the charm! I deleted it once before and had no luck, but this time it works.

I am not advanced at all with PHP.. is there some way I can upload the logo from a file in FTP?