As some of you will have noticed, we recently suffered a virus attack which caused a fake anti-virus, Smart Protection 2012, to be offered and a number of error messages to appear. It worked by adding malicious code to WordPress’s php files. As fast as I deleted the code, it reappeared. It seems the infection goes a lot further affecting other files and even getting into the database. It might be injected either via HTML hidden in comments or via a stolen FTP login.
Anyway, based on these instructions (click here), I was able to finally eliminate it…I hope. There seems to be little information out there on this virus and the method of removal was hard to find, so please pass the link on to anyone who experiences this problem on their site. If you PC is infected, Malwarebytes is a free anti-virus that should sort out the problem. Beware, as there are also fake instructions on forums that will only compound the problem.
We have now done a full security review and have implemented far tougher measures. The irony of this happening for the first time in 10 years as soon as the site is moved from shared hosting to a supposedly more secure VPS does not escape me. Sod’s Law appears to be infallible.
Anyway, I hope you noticed that I have been working hard uploading new videos and have finally go an expanded version of my nerve damage study on-line.