How it works New virus from the domain '' is infecting many WordPress sites these days by injecting a line of JS code into the wordpress themes/plugins files and all posts and pages via sql command. The virus will redirect the sites to malicious domains like , , and . How to remove the 'js.donatelloflowfirstly.ga' code There is no clues how this happened and where is the backdoor till now, the only way is to clean it manually! Here is my steps: 1: First Step Very important. De-active CDN function first, and you need to turn offer Memcached / Redis if you are running these with VPS hosting. 2: Basic Step 1): Check your root folder via...