rufusbabe

Hi Michael,
Thanks so much for your advice. I finally figured it out from this post – https://www.ads-software.com/support/topic/un-necessary-care2com-links-in-my-source-file?replies=23! ??

For some reason my functions.php was referencing that javascript file and inserting that malicious code into the top of the site. I have no clue why it was only happening on this hosting and not others though. Very odd.

Anyway, thank goodness it’s all fixed now. Thanks everyone for all your help! Much appreciated! ??

But the theme works absolutely fine on a different test hosting… with no malicious code. The malicious code only appears on the icsolutions.com.au hosting…?!

UPDATE
I decided to check and see if the malicious code was in the theme or content. So, I switched to twenty eleven theme and deleted my theme (epsilon). Code disappeared! YAY!!

I then reloaded a clean, shiny & new epsilon theme, activated and uh oh… code is back!! WTF!!?? I don’t understand!! I loaded exactly the same theme files onto a test hosting I have and no malicious code came up!

So the code is in the content…?? ?? argh! not cool! I have no idea where to go now!

Thanks Ipstenu. Since my last post I realised by PC had been infected with Trojans and other bad things that record keystrokes and passwords. It looks like this may have been the cause. I checked the functions.php file but can’t see anything obvious (no base or calls to care2.com). I suppose my next step is to totally reload my theme…

Hmm, yes I have read that timthumb has major security issues. I look into this. Thank you!

I still have no clue how to find the source of this code though!! ??

Hmm no, I don’t have any database backup plugins installed…
Plugins I currently have installed –
– Akismet
– Be-It Facebook SideTab (I have this installed on other clients sites with no problems)
– Contact Form 7
– Contact Form 7 widget
– Exploit Scanner
– Hello Dolly
– Really Simple CAPTCHA
– SK Testimonials
– Social Media Tabs
– TAC (Theme Authenticity Checker)
– Theme-Check
– WordPress Importer
– WordPress Sentinel
– WordPress SEO

A few of the scanners/theme checkers I’ve just installed to try and figure out what’s going on. Do any of the other ones look dogey?

Hi FlyersPh9,
I found this forum – https://www.free-installations.info/forum/threads/thumbnails-with-timthumb-php-on-000webhost-not-working.106/page-2

I downloaded the edited timthumb.php file in this forum and replaced the non-working one with this one and it just started working! ??

Hope this helps. ??

Ooops, sorry I meant to mention the website I am working on is at https://www.jkdm.com.au.
Cheers!

Yes, I did download it from www.ads-software.com.
I installed 2 SEO plugins but I’m not sure which one it is that’s the issue.
SEO Ultimate & WordPress SEO by Yoast
The links only appeared when I installed these 2 plugins… so I have no reason to think it was caused by anything else. I did do some research and some other people have also had problems with seo plugins downloaded from www.ads-software.com.

Thanks for replying. Ugh, now to fix it. Thinking about going back to Joomla now! ??