I need help - js:redirector-uq trojan

[ladyjr]

Sorry - I wasn't clear. I'm talking about the "Deobfuscation results" section in the Wepawet and the "JavaScript" and "HTTP Transactions" sections for urlQuery. I don't know what file(s) they are referring to.

And thanks for all your help. This area is all new to me.

[ladyjr]

Ok, here's an update on my issues with my site(s). I manually reloaded the latest version of wordpress, overwriting the files there. This got rid of most of the problems. Then it finally clicked - I had been looking for the actual code, not the crap code hidden in the eval that wasn't supposed to be there. Now, I've got to hit each php file and make sure it's clean.

Thank you to everyone who offered help to this lost soul. I will check here and post back once I have gotten thru this. I'm sure I'll have some additional questions before it is all over.

[!Donovan]

Hi ladyjr,

Do you still need help?

[ladyjr]

Hi Donovan,

Nope - all has been cleared up.    After doing some research, I found a script on Sucuri that I could load into my root directory to clean up everything. I did that, and now all is clean. I have changed my security and will be keeping a sharp eye on everything. Thank you (and all the others) for all the help and pointers that you gave me. I have learned a lot and I am already helping someone at work with this information so she can avoid the problems I experienced. I will be visiting back here from time to time, hoping to give help back to some other lost soul.