smarmoofus

Ahh! I think I found the extra bit of code that was not permitting a full cleaning! I seem to have my site sanitized now. I can load my wp-admin/index.php without blocking scripts, and the page source no longer shows the script at the bottom.

What I failed to check was an old folder I’d created about a year ago wherein a friend was going to help me to learn .php, and it had a php file in it. It was also injected with the malicious code. I deleted that folder and did another clean install of the Wordpess files, and now it seems to be fixed.

Mine is: http://www.smarmoofus.com

I did have a virus, yesterday (my friend had the same one and suspects we got it when upgrading one of our plug-ins), but I did a second fresh install and deleted all of it. I went through file by file to verify (it was a LONG day yesterday) that it’s cleaned up.

I told my noscript add-on on my browser that my own site is not safe, so I can view the index.php page. It’s some script running on the admin side that’s causing the problem.