Can someone take a look at this code?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Pineapplez
    Confirmed User
    • Dec 2011
    • 246

    #1

    Can someone take a look at this code?

    I let wordfence run a scan on one of my wp blogs.
    My theme header.php is modified. I use twenty twelve btw.



    And also, this code was added a bit further down.

  • Manfap
    Confirmed User
    • Jan 2013
    • 2626

    #2
    its malware. serverside hack.

    Comment

    • signupdamnit
      Confirmed User
      • Aug 2007
      • 6697

      #3
      Yep. Second part looks like it's probably a hack.

      You don't like my posts? Put me on ignore or fuck right off. I'll say what I want.

      Comment

      • seeandsee
        Check SIG!
        • Mar 2006
        • 50945

        #4
        looks shady
        BUY MY SIG - 50$/Year

        Contact here

        Comment

        • woj
          <&(©¿©)&>
          • Jul 2002
          • 47880

          #5
          yea, that 2nd part is an exploit, usually when that happens it's all over the place in 100s of different files...

          if you need a hand cleaning it all up, icq: 33375924 or email me at woj#a#t#wojfun#.#c#om to discuss details
          Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000
          Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager
          Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager

          Comment

          • bloggerz
            Too lazy to set a custom title
            • Dec 2006
            • 16253

            #6
            Yup, looks like an exploit
            I SELL ADULT BACKLINKS! Email: eroticweb>gmail SKYPE: gfybloggerz

            $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

            Comment

            • Creatine
              Confirmed User
              • Apr 2013
              • 1060

              #7
              This code is encrypted:





              It's hard to say what it does, I would just remove it and see what happens. If the website is still fuly functional than it's fine.

              Comment

              Working...