According to publicwww, so far aprox. 17 sites are affected by apu.php?zoneid=3024785 malware.
More are expected to show up and there’s no guide available so far.
I will perform a free cleanup for the first site submited to Magefix.
If your website is already infected, make sure you perform a backup to prevent further data loss.
Also, check theme files – in particular functions.php file.
Need help? Let us clean your site.
Malicious URLs: otrwaram.com/apu.php?zoneid=3024785
Similar contaminations: dolohen.com/apu.php?zoneid=2497071 ( 206.54.165.154 )
IPS: 88.85.66.142
Other domains: contehos.com, netpatas.com, reagend.com, bechatotan.com