What plugin does Wordpress use for tooltips?

Question

JavaScript

Good afternoon.

Who knows what plugin (or rather library) Wordpress uses (WooComerce to be more precise) for tooltips when you first enter the admin panel.

They have interactive prompts along the chain that say in which field what should be inserted. Looks like training. I want to replace the standard documentation with interactive tips (they will be shown at the first login) and the option to "Take interface training" will always be available.

Interested in Jquery plugin, with the simplest possible setup. I do not want to program the logic for bypassing the fields myself.

Answer 1

I found such a library, but in woocommerce it's more prettier.
xbsoftware.ru/produkty/enjoyhint

Answer 2

first, look in .htaccess for left redirects or auto_append_file / auto_prepend_file - this is usually how malicious code is inserted into WordPress.
is not found in .htaccess - then look here cssing.org.ua/2008/06/01/wp-footer-exploit/
and don't forget to update wordpress to the latest version!

Answer 3

The virus most likely goes through the infected machine via FTP. Go in that direction.

Answer 4

The virus may have entered the web directory. To find it, you can try to do the following:
1. Copy all files from the web directory on a regular machine to a separate directory;
2. In a file manager like FAR, start searching for files in this directory with the contents of some fragment of the virus code.
Naturally, this is a half measure. You need to look for possible causes of hacking and eliminate them - on your own or through hosting admins.

Answer 5

You can also see if there are any recently changed files, often "coolhackers" are fired with this.

Answer 6

What kind of hosting: shared, vds, vps? WP version? How can content (plugins) be loaded? Permissions for folders and files? FTP/SSH? File version control? There is a lot to guess. Help give you an answer.

Answer 7

Faced a similar problem. Only I had to cure not one, but many WordPress. I even had to write a separate script for such a case. I share : blog.nkuznetsov.me/2012/11/wpdiff-tool-for-wordpress-comparison.html
Using this script, you can:
1. compare the current installation with the original one and see if the "bug" fits into the kernel or not
2. also you can compare a healthy version (from a backup, for example) with a sick one and determine which plugin has changed

Answer 8

a lot of experience in cleaning and protecting against such a scourge.
I recommend notepad++ with bulk text replacement.

Answer 9

First of all, check your local computer. All trojans get through FTP. Download the entire site locally and check it with a good antivirus.