Comments on: WordPress Virus – function _check_isactive_widgets

By: alok

alok — Sat, 03 Jul 2010 17:11:16 +0000

Thanks for the suggestion. We already got it removed but we are finding it out that it regularly infects the local installations of our wordpress developer as they routinely download and test new themes.

By: chris

chris — Sat, 03 Jul 2010 15:30:59 +0000

it looks like themes2wp.com has this code in all their themes.

dont want to link to their site because they dont deserve any exposure, if you have this infected, you need to goto the bottom of your functions.php and remove the neccessary code, once activated a theme with this code, it will cycle through all your themes and add this code, so delete the code from every single theme that has a functions.php file.

when downloading themes from sites other than official source(s) check the functions.php file and header and footer files for encrypted codes, just avoid those in general.

By: Greg Fielding

Greg Fielding — Mon, 10 May 2010 05:44:05 +0000

We just got hit with this in our MU community.

Any ideas as to what this is or how to get rid of it?