How to remove a virus from website

Get on to your hosting company. There's probably a script lurking somewhere on the server (maybe on another account if you're on shared hosting) that's inserting this script. The hosting company should be able to restore from backup.

If the problem persists, the only solution is to move hosting company and reinstall from your own backup. This happened to me a while back and it's a real PITA.

Shaun

Clear the script, then empty your cache (both page cache and browser cache), then check again.

It is best to get in touch with your hosting provider first and foremost. If they cannot help you with the problem, then you can try checking on the files from your computer, it must be that the virus is from your computer. I hope this helps.

Call your hosting service. They'll scan and fix and report what they found. Usually there's an exploit somewhere that got hacked and they'll snip out whatever that exploit was. Then you can go into your original files and fix the code there.

Hi

Oh, how I feel your pain!! I've been through exactly the same myself recently (only I had a whole bunch of sites that were effected), and after much research and failed attempts I found someone on Fiverr. Now I have to say I was very cynical that they would be able to do something. However they seem to have very positive feedback and so I gave it a go (I had to pay a premium due to the number of sites effected), and do you know he was absolutely superb, within a few days he had resolved all my issues.

So you might want to give Fiverr a look (if you would like to know the chap I used, just drop me a line.)

Once I got it sorted I have done my best not to be attacked again by:

1. Deleting all unused themes
2. Bringing the WP versions up to date
3. Bringing all plugins up to the latest version

I also found and loaded a couple of security plugins.

As I though it might help others I produced a step by step guide on how to get the plugins and how to set them up - if you look on my signature below you will see I have a link to it there.

Anyway I hope you get it sorted soon.

All the best
Andy

Removing it, is not the only problem you got.

You need to find out how did it happen! How come somebody was able to add code into your directory? Is it possible that your security permissions dont restrict access the way they should?

1.Check your site with a good website/application scanner. Most of them offer a 30day trial. Use it.
2. Apply good security practices to prevent future incidents...

good luck