A few of my WordPress sites got infected with this nasty code today (this site was safe as it was on a different server)
The sites that were infected were all hosted by goDaddy
A few symptoms:
– the CSS was messed up in the admin panel so when I logged in, the formatting was wrong
-when you would go to these sites from a PC (the Mac seemed to be safe from this Malware) – a fake AV attack was launched and prompted me to download this software to fix it – i believe it was from a site realsafe-23.net and suitcase52td.net
–It also mentioned security threat analysis
-the only way I could get rid of the screen was to do a Ctr+Alt+Del and end the Firefox session
-it wanted me to click OK to get some sort of fix which of course I did not do
Clearly this was an attack on my WordPress sites and many people have been having this same exact issue today.
The WordPress malware fix was very simple and explained below…
download this file and rename it to wordpress-fix.php
Use FTP to upload it to your site
Run it using your browser as: http://yoursite.com/wordpress-fix.php
Wait a few minutes until the script is done – it will scan your whole site and remove the malware entries
When the script is done, go back to your site and remove the “fix” file
Check out this blog for more information about these attacks
Thank you for this detailed, informative, and practical remedy to a surprisingly serious and more than annoying attack.
Your superior computer and coding skills allowed you to decipher and solve the problem that plagued me for weeks. Consider me a tad envious – but quite grateful for your information.
Thanks for the compliment but I can not take credit for coming up with the fix. Someone taught it to me and I just re-wrote it in my own words. Your right though, this attack was a real pain! Glad we got it sorted out though!
Any time. Thank you for visiting our site and posting.
Excellent and easy fix! Thanks for posting!
Anytime Kelly. Thanks for your comment!
My site is infected. I can not download the script. Can you please upload again. It has been down for a few weeks and no one is able to help. Thanks
Sorry I got this too late Lisa. Looks like your site is back up.
Please, can somebody reupload this fix??? Link doesn’t work 🙁 I realy can’t find it and i realy need it! Please reupload or send it to my mail [email protected] Thank you! PLEASE SEND IT!