Donatello malware, how to fix it?

  • Unknown's avatar
    chenglongstorysbi · Member ·

    yea, so I was attacked by a malware called donatello malware, not sure how to fix it. I’m still new to wordpress, that was my first website :(

  • staff-mckluskey · Staff ·

    Hi there!

    I don’t see any sites under your account, what’s the address of the site you’re working on?

    Please note that these forums are for WordPress.com hosted sites only. If your site is using the open-source WordPress.org software, we won’t be able to help you out and you’ll want to seek help at these forums:

    https://wordpress.org/support/forums/

  • Unknown's avatar
    shikhilsharma · Member ·

    Hi there!

    There are two places you should definitely look at:

      Functions.php file and index.php (search for ‘go.donatelloflowfirstly.ga’
      wp_posts table in your database. Again, search for the above go.donatelloflowfirstly.ga, js.donatelloflowfirstly.ga and blackwaterforllows.ga.

      You’ll have to delete the occurrences of these JS files and malicious URLs. Do take a backup before deleting them.

      Here’s an article we did with a long 25 min DIY video on how to do it if it helps:

      Fixing the Donatello malware

      P.S. If by any means posting the link doesn’t qualify under forum rules, happy to edit and remove it. Trying to be a little more active on WP forums :)

  • The topic ‘Donatello malware, how to fix it?’ is closed to new replies.