izaascj

Resolved with your help, pramadiputra. Thank you!

I definitively gave away the Ultimate Member

I deleted the last folder in uploads

I passed the sucuri and restored all the files

the address https://cdn.allyouwant.online was inside “header”. I downloaded the theme folder and sent a new header.

Not satisfied, I refresh the subject.

The action worked for a few minutes, but it became infected again

What did not I do?

thank you so much

I thank you from the heart!
For me it will not work, because I’m Brazilian and I use the translator, this advanced language is very difficult!
I know your guide is going to work for many, I think I can only do it if someone creates a video tutorial one day.
I came up to the part that is to find the “var po” and the “var need_t”, but do not understand if it is to delete everything resend the files to the server. I got scared!
Thank you so much! It helped a lot of people!

great! I already installed the new version. But and now? What and where to clean? I installed Sucuri that shows me many altered pages, but how do I know which ones are infected?

Is it not the responsibility of Ultimate Members to publish a guide on how to remove this virus? Or a plugin that removes the virus? I could not remove

• This reply was modified 6 years, 6 months ago by izaascj.
• This reply was modified 6 years, 6 months ago by izaascj.

Ent?o chegamos a uma conclus?o. Tenho esse plugin….
Pior que conto com ele para a proposta do site, com professores criando seus perfis no site.
O que fazer? Basta desativar o plugin e limpar o micro de infec??o? Poxa e o que fazer para usar um plugin similar?

Resolvido. Obrigado!