Fucking spammers. Today I found a mountain of spam links for crap like zyrtec and zithromax in my footers.php. All the links forward to canadian-meds-shop.com. These are bad people: scammers and thieves.
I also found a strange file in my wordpress theme file, 1.php. The file started like this:
$login = “”; //Login
$pass = “”; //Pass
$md5_pass = “”; //If no pass then hash
I don’t know how this file got there or what it does but I’m pretty sure it’s bad stuff.
Do you want to try and figure out what this evil f’ing spam program does? Here is the virus file. Caution! This is a bad program! (update: I removed the virus. It’s a bother that it keeps tripping my antivirus software.)
Tell me what you find out, would you?
Now I’ve got to figure out how they got on my system…. grrrrrr.