Title: Invisible Malicious Code
Last modified: August 19, 2016

---

# Invisible Malicious Code

 *  [busboywithasilencer](https://wordpress.org/support/users/fakob/)
 * (@fakob)
 * [16 years, 9 months ago](https://wordpress.org/support/topic/invisible-malicious-code/)
 * [The blog I manage](http://www.wo.ala.org/districtdispatch/) is hacked. Somewhere
   in the style sheet or html is the following malcode:
 * `<body><div style="position:absolute;left:-1031px;top:-505px"><a href="http://
   giapet.net/?otq=vardenafil">Vardenafil</a>&nbsp;<a href="http://giapet.net/?otq
   =tramadol-no-prescription">Tramadol no prescription</a>&nbsp;<a href="http://
   giapet.net/?otq=work-at-home">Work at home</a>&nbsp;<a href="http://giapet.net/?
   otq=debt-consolidation-service">Debt consolidation service</a>&nbsp;<a href="
   http://giapet.net/?otq=notary-public">Notary public</a>&nbsp;<a href="http://
   giapet.net/?otq=oxycontin">Oxycontin</a>&nbsp;<a href="http://giapet.net/?otq
   =prescriptions">Prescriptions</a>&nbsp;<a href="http://giapet.net/?otq=pokerstars"
   >Pokerstars</a>&nbsp;<a href="http://giapet.net/?otq=easy-payday-loan">Easy payday
   loan</a>&nbsp;<a href="http://giapet.net/?otq=propecia-online">Propecia online
   </a>&nbsp;<a href="http://giapet.net/?otq=aciphex-20mg">Aciphex 20mg</a>&nbsp;
   <a href="http://giapet.net/?otq=soma-carisoprodol">Soma carisoprodol</a>&nbsp;
   <a href="http://giapet.net/?otq=payday-advance-loan">Payday advance loan</a>&
   nbsp;<a href="http://giapet.net/?otq=pay-off-debt">Pay off debt</a>&nbsp;<a href
   ="http://giapet.net/?otq=casino-online">Casino online</a>&nbsp;<a href="http://
   giapet.net/?otq=myspace">Myspace</a>&nbsp;<a href="http://giapet.net/?otq=lansoprazole"
   >Lansoprazole</a>&nbsp;<a href="http://giapet.net/?otq=free-slot-sites">Free 
   slot sites</a>&nbsp;<a href="http://giapet.net/?otq=order-cialis">Order cialis
   </a>&nbsp;<a href="http://giapet.net/?otq=cosmotology">Cosmotology</a>&nbsp;<
   a href="http://giapet.net/?otq=classic-car-insurance">Classic car insurance</
   a>&nbsp;<a href="http://giapet.net/?otq=veterinary">Veterinary</a>&nbsp;<a href
   ="http://giapet.net/?otq=order-ultram">Order ultram</a>&nbsp;<a href="http://
   giapet.net/?otq=buy-celexa">Buy celexa</a>&nbsp;<a href="http://giapet.net/?otq
   =credit-debt-consolidation">Credit debt consolidation</a>&nbsp;<a href="http://
   giapet.net/?otq=tramadol-buy-online">Tramadol buy online</a>&nbsp;<a href="http://
   giapet.net/?otq=get-phentermine">Get phentermine</a>&nbsp;<a href="http://giapet.
   net/?otq=tramadol">Tramadol</a>&nbsp;<a href="http://giapet.net/?otq=food">Food
   </a>&nbsp;<a href="http://giapet.net/?otq=buy-wellbutrin">Buy wellbutrin</a>&
   nbsp;<a href="http://giapet.net/?otq=pathology">Pathology</a>&nbsp;<a href="http://
   giapet.net/?otq=duromine-(brand-ionamin)">Duromine (Brand Ionamin)</a>&nbsp;<
   a href="http://giapet.net/?otq=party-poker-bonus-code">Party poker bonus code
   </a>&nbsp;<a href="http://giapet.net/?otq=casino-game">Casino game</a>&nbsp;<
   a href="http://giapet.net/?otq=prilosec">Prilosec</a>&nbsp;<a href="http://giapet.
   net/?otq=buy-avandia">Buy avandia</a>&nbsp;<a href="http://giapet.net/?otq=debt-
   solution">Debt solution</a>&nbsp;<a href="http://giapet.net/?otq=term-life-insurance"
   >Term life insurance</a>&nbsp;<a href="http://giapet.net/?otq=party-poker-bonus"
   >Party poker bonus</a>&nbsp;<a href="http://giapet.net/?otq=universities">Universities
   </a>&nbsp;<a href="http://giapet.net/?otq=xanax-brand">Xanax Brand</a>&nbsp;<
   a href="http://giapet.net/?otq=stomach">Stomach</a>&nbsp;<a href="http://giapet.
   net/?otq=allegra">Allegra</a>&nbsp;<a href="http://giapet.net/?otq=cialis">Cialis
   </a>&nbsp;<a href="http://giapet.net/?otq=order-carisoprodol">Order carisoprodol
   </a>&nbsp;<a href="http://giapet.net/?otq=phlebotomy">Phlebotomy</a>&nbsp;<a 
   href="http://giapet.net/?otq=terbinafine">Terbinafine</a>&nbsp;<a href="http://
   giapet.net/?otq=bingo">Bingo</a>&nbsp;<a href="http://giapet.net/?otq=ambien-
   generic">Ambien generic</a>&nbsp;<a href="http://giapet.net/?otq=viagra-online-
   pharmacy">Viagra online pharmacy</a>&nbsp;<a href="http://giapet.net/?otq=what-
   is-adipex">What is adipex</a>&nbsp;<a href="http://giapet.net/?otq=fluoxetine"
   >Fluoxetine</a>&nbsp;<a href="http://giapet.net/?otq=state">State</a>&nbsp;<a
   href="http://giapet.net/?otq=tenuate-diet-pill">Tenuate diet pill</a>&nbsp;<a
   href="http://giapet.net/?otq=auto-insurance-company">Auto insurance company</
   a>&nbsp;<a href="http://giapet.net/?otq=life-insurance-quote">Life insurance 
   quote</a>&nbsp;<a href="http://giapet.net/?otq=soma-buy-online">Soma buy online
   </a>&nbsp;<a href="http://giapet.net/?otq=life-insurance-lead">Life insurance
   lead</a>&nbsp;<a href="http://giapet.net/?otq=internet-bingo">Internet bingo</
   a>&nbsp;<a href="http://giapet.net/?otq=hydrocodone-prices">Hydrocodone prices
   </a>&nbsp;</div>`
 * In the editor section of my dashboard, I can find where the source code claims
   it is, which is as follows:
 *     ```
       <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
       <html xmlns="http://www.w3.org/1999/xhtml">
       <head profile="http://gmpg.org/xfn/11">
       <meta http-equiv="Content-Type" content="<?php bloginfo('html_type'); ?>; charset=<?php bloginfo('charset'); ?>" />
       <meta name="distribution" content="global" />
       <meta name="robots" content="follow, all" />
       <meta name="language" content="en, sv" />
       <title>
       <?php bloginfo('name'); ?>
       <?php wp_title(); ?>
       </title>
       <meta name="distribution" content="global" />
       <meta name="robots" content="follow, all" />
       <meta name="language" content="en, sv" />
       <meta name="generator" content="WordPress <?php bloginfo('version'); ?>" />
       <!-- leave this for stats please ->
       <link rel="alternate" type="application/rss+xml" title="RSS 2.0" href="<?php bloginfo('rss2_url'); ?>" />
       <link rel="alternate" type="text/xml" title="RSS .92" href="<?php bloginfo('rss_url'); ?>" />
       <link rel="alternate" type="application/atom+xml" title="Atom 0.3" href="<?php bloginfo('atom_url'); ?>" />
       <link rel="pingback" href="<?php bloginfo('pingback_url'); ?>" />
       <?php wp_get_archives('type=monthly&format=link'); ?>
       <?php wp_head(); ?>
       <style type="text/css" media="screen">
       <!- @import url( <?php bloginfo('stylesheet_url'); ?> ); -->
       </style>
       </head>
       <body>
   
       <div id="wrap">
       <div id="logo" onclick="location.href='http://wo.ala.org/districtdispatch';" style="cursor: pointer;" title="District Dispatch">
       </div>
       ```
   
 * but, that code I can access doesn’t display or allow me to remove the malcode.
   Any help?

Viewing 1 replies (of 1 total)

 *  [iridiax](https://wordpress.org/support/users/iridiax/)
 * (@iridiax)
 * [16 years, 9 months ago](https://wordpress.org/support/topic/invisible-malicious-code/#post-1197524)
 * See: [http://codex.wordpress.org/FAQ_My_site_was_hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked)

Viewing 1 replies (of 1 total)

The topic ‘Invisible Malicious Code’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 1 reply
 * 2 participants
 * Last reply from: [iridiax](https://wordpress.org/support/users/iridiax/)
 * Last activity: [16 years, 9 months ago](https://wordpress.org/support/topic/invisible-malicious-code/#post-1197524)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics
