kochanski

I’ve been having the same issue. Have followed all the steps mentioned to clean things up and it reappeared a week later. No strange CGI files in my directories, but I checked all files by date (as we don’t make updates often and usually know within 12 hours of the site being down) so have removed some cache files and plugins that may have been targeted and aren’t realyl necessary to keep. Guess I’ll know soon if it works!

However, I have a plugin called 404 Redirected that tells me when files aren’t found and gives me an option to set-up redirects. Seems that “78 dot 138 dot 104 dot 178” is trying to access gddform.php (one of the main files that appears when the issue is present) after I’ve deleted it. Thought this may be of interest to you.

Ohh and in addition to making my htaccess read only, I’ve setup a redirect for the gddform file to https://www.youtube.com/watch?v=dQw4w9WgXcQ (might not solve the problem, but I hope it sends a message)!

Thanks, managed to get the site back up long enough to install the plugin! 6 threats found and still checking…

Hi, I’m having the same issues! How did you manage to remove the malware to fix this?

I’ve got the exact same issue with permalinks breaking and the 4 files in my WordPress core directory:
-gdd-webform.php
-gddform.php
-h-s.txt
-s-g.txt
-starting.php

Also on GoDaddy (but seriously wanting to switch soon)!

Thanks, I appreciate the explanation ??

I’ve made do for now by editing my feature images to be within a circle so that it looks similar to the pretty version!

Any other suggestions welcomed! Is CSS the only thing driving the circle feature?

As far as I can tell the only things that have changed on my PC are the latest versions of Java and MS Silverlight. But I have the same problem when viewing the site from my PC at my day job as mentioned above so it does seem to be an IE related thing somehow.

Hi Andrew,

I deactivated all other plugins and installed the one you suggested, no change unfortunately.

Compatibility mode is definitely not on. I’ve noticed the same problem if I view the site from my work computer (IE 8). Tried clearing cache and cookies but no luck there either.

Does anyone else see what I mean?
https://www.fcfa.com.au/wordpresstest/

Would love to hear any other suggestions!

Sure, this link ought to have about 50 attachments listed:
https://www.hypoglycemia.asn.au/articles-news/newsletter-archive/

??

Just WPtouch, I’ve posted a support item for them to check out too.

This link ought to have about 50 attachments listed:
https://www.hypoglycemia.asn.au/articles-news/newsletter-archive/

??

Thanks for replying!

I suspect so too, I’ve put up a post under their plugin to ask them about the issue. We’re using the free version, it’s a non-profit website with no budget for extra features unfortunately.

Thanks for the reply!

I was on v2.3 and upgraded via WordPress automatically. I rolled back to 2.3 a few days ago and just tried the automatic upgrade again – same issue occured.

Just went into the settings and selected posts and pages and hit Apply (after applying they didn’t appear selected though?), under Activities I have the following selected (I deselected all and reselected them then applied):
deleted_post
password_reset
post_publish
post_updated
profile_update
retrieve_password
trashed_post
untrashed_post
user_regisiter
wp_login

Still getting the same error.

Deactivated the plugin and reactived, checked the plugin settings and page and post now both appear selected!

Tested – no more error ??