ginoxy

i fixed the malware thing just deleted that file “includes” from wp-includes

does this look okay to you ?
its from .htaccess

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^https://mysite.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^https://mysite.com$ [NC]
RewriteCond %{HTTP_REFERER} !^https://webmail.mysite.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^https://webmail.mysite.com$ [NC]
RewriteCond %{HTTP_REFERER} !^https://www.mysite.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^https://www.mysite.com$ [NC]
RewriteCond %{HTTP_REFERER} !^https://www.webmail.mysite.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^https://www.webmail.mysite.com$ [NC]
RewriteRule .*\.(jpg|jpeg|gif|png|bmp)$ – [F,NC]
# BEGIN WordPress

# END WordPress

<Files 403.shtml>
order allow,deny
allow from all
</Files>

deny from 74.210.4.54

so do i have to remove this “includes” file !!

firefox sucks big time i have another issue that tells google that i have malware with version 2.8.2 i think something wrong in this version !!!

just found a folder inside “js” called (includes) that has lots of .html files and jpeg as well as gif ! i deleted that folder but still my link which is https://www.blahblah.com/wp-includes/js being consider as an attack link !

Okay its getting weird and weird ! i tried macafee site advisor and seems like everything is ok but still Google keeps poping that message !!

Thanks for replying

i did the site: thing but i did nto get any warming !
however i believe it has something with the browser ! coz when i upgraded firefox to the latest version i got this message ! and only when i click on the “link” button in any post ! however i think also the latest update with WordPress 2.8.2 has something wrong with “js” thing

where in the loop? im using the default theme kubrick

i have the same problem !
i did everything but when i send an e-mail nothing appears there !

So i have to erase my database then install new one. is that right?

did you upgrade bu auto or install new version ? coz it seems that if u upgrade automatic it will not show !! i guess

yeah i looked at it but did not get !!

Through MySQL Command Line

1. Get an MD5 hash of your password.
* Visit MD5 Hasher, or…
* Create a key with Python. or…
* On Unix: echo -n <password> | md5sum
2. “mysql -u root -p” (log in to MySQL)
3. enter your mysql password
4. “use (name-of-database)” (select WordPress database)
5. “show tables;” (you’re looking for a table name with “users” at the end)
6. “SELECT ID, user_login, user_pass FROM (name-of-table-you-found)” (this gives you an idea of what’s going on inside)
7. “UPDATE (name-of-table-you-found) SET user_pass=”(MD5-string-you-made)” WHERE ID = (id#-of-account-you-are-reseting-password-for)” (actually changes the password)
8. “SELECT ID, user_login, user_pass FROM (name-of-table-you-found)” (confirm that it was changed)
9. (type Control-D, to exit mysql client)

Note if you have a recent version of MySQL (version 5.x?) you can have MySQL compute the MD5 hash for you.

1. Skip step 1. above.
2. Do the following for step 7. instead.
* “UPDATE (name-of-table-you-found) SET user_pass = MD5(‘”(new-password)”‘) WHERE ID = (id#-of-account-you-are-reseting-password-for)” (actually changes the password)

from 6 to 9 ! i did the same but nothing happened !

Hi, any idea please. i need it urgently
Many thanks and regards

Any help around this case?

Regards,

any idea?