Agus Nizami

Several time my website: http://www.media-islam.or.id is down because of PHP scripts are injected to the wordpress files of the website. In 7 days the website after displaying unsolicted ads will be down. I have to delete the Jetpack directory in order to restore the website.

Using FileZilla, I check the files that are recently modified. I have at least 4 files in the Theme directory: footer.php, header.php, index.php, and js.php. Some of the malware script is:

//go.oclasrv.com/apu.php?zoneid=1495117

We should delete the script or make it as comment.

Filed under: English, IT |