mcfreder

Try to optimize then repair

You could repair manually. Simply access your PhpMyAdmin in your CPanel or Plesk. Then Open your wordpress database and select all your tables and finally select Repair from the drop down menu bellow.

From previous experience, There is only one explanation to how the malware keeps coming back or regenerating. You have a hidden Backdoor on either your PC or SHARED HOSTING.

If I were you I would:

– Download Malwarebytes free version and run a scan on PC.
– Submit a ticket to HostGator and ask them to run a malware scan where your websites are hosted. (Or you can request $24 yearly sitelock addon: https://www.hostgator.com/sitelock)

After all the above is done, You will finally need to change your ftp passwords and clean any potential vulnerabilities from your WordPress as follow:

– Literally, remove all wordpress themes that you are not using and only keep the one you are using and optionally twenty wordpress themes.

– Remove all plugins and reinstall them from your plugin admin panel.
– Avoid plugins that are no longer supported. Those might contain sweet vulnerabilities for hackers.
– Stop using timthumb as an image resizer as it introduces several vulnerabilities to your wordpress installation.

– Use two factor identification/Captcha for your WP ADMIN.

– CloudFlare is a must have! It is 5 min very easy to setup and It provides outstanding security against attacks and hackers, in addition to better performance for your website. So WordPress security plugins are next to not needed or optional honestly.

Consider switching to secured ftp protocol “SFTP” I recommend WINSCP: https://winscp.net/eng/download.php

And get an internet security suite for your business such as paid ones: Kaspersky, panda or you get a free comodo internet security: https://www.comodo.com/home/internet-security/free-internet-security.php

Here are two top website scanners that help locate malware fast and free:

https://quttera.com/website-malware-scanner

https://sitecheck.sucuri.net/

• This reply was modified 7 years, 3 months ago by mcfreder.
• This reply was modified 7 years, 3 months ago by mcfreder.

One word: Impossible!

Just keep looking..

On WordPress Admin Panel Go to > Widgets then look for Text Widget (https://en.support.wordpress.com/widgets/text-widget/) then drag it to your sidebar and paste that flash object code in it.

a couple of things you need to check:

-Update Google Chrome: https://support.google.com/chrome/answer/95414?co=GENIE.Platform%3DDesktop&hl=en-GB

-Clean your browser cache + cookies as @sterndata suggested.

-Caching plugin especially w3 total cache or wp super cache Solution ===> disable page caching or use page caching basic instead of enhanced.

Good to know ?? No problem!

check Settings → Media and make sure that Uploading Files folder is set to wp-content/uploads and click Update.

If that didn’t fix. Go to permalinks and switch to default links and click Update. if it is fixed you can revert back to your preferred permalinks.

• This reply was modified 7 years, 7 months ago by mcfreder.

Try to reupdate again or update manually by downloading the latest version from: https://www.ads-software.com/download/

And then only extract everything EXCEPT wp-content folder.

Hello,

You can use “Velvet Blues Update URLs” plugin: https://www.ads-software.com/plugins/velvet-blues-update-urls/

to change all old website link with new ones. There’s even a 1 min tutorial to show you how to do it: https://www.youtube.com/watch?v=pzI9quk29_s

GL

By the way, after you clean up your website. make sure to scan and clean your computer as well with these malware cleaners:

https://www.hitmanpro.com/en-us/hmp.aspx
https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Then you need to remove any free antivirus you are using and start buying internet security suites or use comodo internet security for free (https://www.comodo.com/home/internet-security/free-internet-security.php?track=8129)

After you have done all this, now you need to change all your ftp, wordpress, cpanel/plesk, shell passwords.

Advice: AVOID installing NULLED scripts or pirated wordpress themes/plugins, shaddy torrents, browsing 3rd party websites without an internet security suites. Keep your work computer for just work and use another one to do things you like to do.

No problem mate! Let me know how it goes ??

• This reply was modified 7 years, 10 months ago by mcfreder.

You don’t need to remove the entire wordpress instalation. the scan will locate the malware for you so you can go to your ftp and remove that malicious code or files. Usually malware sits in index.php , .htaccess, theme files (header.php, footer.php, etc.), plugin files, wp-config.php. Yes! When it only says blacklisted you only need to to confirm through webmaster tools and then wait for 2 hours – 24 hours for the blacklists to be removed.

the question is have you removed all the malware infection or not ?

To find out you need to run 2 scans on both these websites:

https://quttera.com/
https://sitecheck.sucuri.net/

If the scans say that you have everything clear but browser blacklisted then congratulation! In this case you just login to your google webmaster tools account and then go to security tab of your websites and confirm to google that you have cleared out your website.

Keep me updated

[off-forum contact info redacted]

• This reply was modified 7 years, 10 months ago by Steven Stern (sterndata).

Download again latest wordpress archive and try to extract all files outside the archive wp folder look at this image (https://prntscr.com/dzydlk)

Don’t change .htaccess in wordpress folder!!!!! You restore it go to wp-admin > Permalinks and click update button it will update your .htaccess file or use this:

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /wordpress/index.php [L]
</IfModule>
# END WordPress