Hi
My wordpress site http://www.Jimmyfro.com was suspended because I was either hacked, or my hosting co is hard up for cash, and is shaking me down for $200 to clean and replace the following lines of PHP. I would rather pay for WP Essenials at $3 / mnth than pay them 200.00 I have no clue how to do this, other than seek out line for line at the ftp page, and cut n paste into a PHP cleaner. Any advice? Does WP Essentials come with cleaning, posting, tech support?
I have attached another copy of that infected or malicious files at the bottom of this email.
Sincerely,
Muralidharan V
Support Specialist
====================================================
/jimmyfro/wp-admin/admin-footer_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-admin/maint/repair_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-admin/includes/class-wp-links-list-table_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-admin/user/admin_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-admin/css/ie.dev_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-admin/images/screen-options-toggle-vs_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-admin/js/comment.dev_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-admin/network/themes_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-21.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/twentyten/rtl_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/twentyten/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/twentyeleven/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/twentyeleven/inc/widgets_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/twentyeleven/images/comment-arrow-rtl_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/twentyeleven/images/headers/pine-cone_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/smallbiz/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/smallbiz/layouts/allinone/frontpage_ver1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/smallbiz/layouts/allinone/css/screen_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/smallbiz/layouts/classic-video/frontpage_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/smallbiz/css/admin-ex_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/smallbiz/images/LK_icon2_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/themes/smallbiz/palette/images/66becb67_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/jetpack/class.jetpack-signature_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/jetpack/_inc/images/after-the-deadline_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/jetpack/languages/jetpack-mk_MK_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/jetpack/modules/shortcodes/vimeo_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/jetpack/modules/after-the-deadline/atd.core_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/wiziapp/themes/iphone/scripts/hscroll_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/wiziapp/includes/blocks/conf/prod_config.inc_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/wiziapp/includes/blocks/components/WiziappVideosAlbumCellItem_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/wiziapp/includes/blocks/imageResizers/WiziappPhpThumbResizer_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-content/plugins/wiziapp/includes/libs/getid3/module.audio-video.bink_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/swfupload/handlers_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/plugins/wpeditimage/js/editimage_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/plugins/wplink/editor_plugin_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/plugins/wplink/img/toggle-arrow_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/plugins/wpgallery/editor_plugin.dev_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/plugins/inlinepopups/editor_plugin_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/plugins/wordpress/img/media_ver1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/themes/advanced/skins/o2k7/ui_black_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/tinymce/themes/advanced/skins/wp_theme/content_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/jimmyfro/wp-includes/js/scriptaculous/unittest_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-17.UNOFFICIAL FOUND
/wp-admin/press-this_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/user/credits_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/network/edit_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/css/install_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/images/media-button_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/images/screenshots/about-twenty-twelve_ver1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/includes/continents-cities_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/maint/repair_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-admin/js/media-gallery.min_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/themes/theme22/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/theme22/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/theme22/title_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/theme22/title_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/theme22/includes/theme-function_bck_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/theme22/includes/theme-function_bck_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/theme22/includes/theme_shortcodes/tinymce/dialog_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/theme22/includes/theme_shortcodes/tinymce/dialog_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/theme22/includes/importer/languages/wordpress-importer_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/theme22/includes/importer/languages/wordpress-importer_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/black-urban/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/black-urban/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/pixeled/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/pixeled/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/pixeled/single_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/pixeled/single_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/pixel/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/pixel/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/modularity-lite/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/modularity-lite/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/cover-wp/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/cover-wp/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/cover-wp/de_DE_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/cover-wp/de_DE_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/css/admin-ex_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/css/admin-ex_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/layouts/five/frontpage_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/layouts/five/frontpage_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/layouts/rotator-video/css/ie_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/layouts/rotator-video/css/ie_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/layouts/allinone/functions_layout_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/smallbiz/layouts/allinone/functions_layout_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-34.UNOFFICIAL FOUND
/wp-content/themes/twentyeleven/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/twentyeleven/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/twentyten/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/twentyten/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/twentytwelve/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/themes/twentytwelve/functions.php: SiteLock-PHP-INJECTOR-1-et.UNOFFICIAL FOUND
/wp-content/plugins/hello_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/hello_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/blurbs/php/model/blurb.class_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/blurbs/php/model/blurb.class_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/audio-player/assets/cpicker/colorpicker_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/audio-player/assets/cpicker/colorpicker_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/powerpress/3rdparty/jquery.watermark.min_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/powerpress/3rdparty/jquery.watermark.min_prevv1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/powerpress/3rdparty/colorpicker/5489e47a_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/powerpress/3rdparty/colorpicker/5489e47a_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/powerpress/3rdparty/maxi_player/generator_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/powerpress/3rdparty/maxi_player/generator_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/add-to-any/icons/blogger_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/add-to-any/icons/blogger_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/jetpack/modules/sharedaddy/images/designfloat_bck_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/jetpack/modules/sharedaddy/images/designfloat_bck_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/wiziapp/themes/iphone/_content_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/wiziapp/themes/iphone/_content_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/wiziapp/themes/iphone/scripts/hscroll_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-content/plugins/wiziapp/themes/iphone/scripts/hscroll_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/images/wlw/wp-watermark_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/images/wlw/wp-watermark_noversion.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/Text/Diff/Renderer/inline_bck_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/Text/Diff/Renderer/inline_bck_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/themes/advanced/skins/default/img/tabs_ver1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/themes/advanced/skins/default/img/tabs_ver1.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/plugins/media/editor_plugin_src_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/plugins/media/editor_plugin_src_backup.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/plugins/inlinepopups/skins/clearlooks2/window_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/plugins/inlinepopups/skins/clearlooks2/window_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/plugins/inlinepopups/skins/clearlooks2/img/confirm_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/tinymce/plugins/inlinepopups/skins/clearlooks2/img/confirm_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/jquery/ui/jquery.ui.widget.min_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/js/jquery/ui/jquery.ui.widget.min_old.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/SimplePie/HTTP/Parser_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/SimplePie/HTTP/Parser_infoold.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/SimplePie/XML/74deef57_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/SimplePie/XML/74deef57_indesit.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/SimplePie/Content/443c0beb_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
/wp-includes/SimplePie/Content/443c0beb_new.php: JCDEF.Obfus.CreateFunc.BackDoorEval-26.UNOFFICIAL FOUND
