WordPress compromised Issue

Mohammad Abu Musa

• October 23, 2015 09:18

Hello, I have a hacked WordPress site, where the attacker managed to exploit mailing system using php code, I cleaned the code but it seems the website is not responding as it used to be (

• 

  24x7server

  • October 26, 2015 17:16

  Hello, Your are not facing this issues due to LFD, I think your site is still infected with the malware and due to that it's not working. I will suggest you scan your site with Sucuri Security and install Wordfence Security plugins on your site to protect your site from malware attack

  0
• 

  anton_latvia

  • October 27, 2015 09:23

  Yes, agree, PHP can't kill itself. Something is messing things in the middle, must be some more scripts or some scripts might be missing. I would search for "eval(" string (How to find hacker files - Norsk Webhotell og Domener) or try to run index.php from shell.

  0
• 

  cPanelMichael

  • October 30, 2015 17:43

  Hello :) You may want to consider reinstalling the application instead of cleaning the affected code to ensure it's not still exploited. Thank you.

  0
• 

  anton_latvia

  • November 02, 2015 09:00

  Reinstalling is always the best, but sometimes it's not possible to do quickly. Also not always upgrades are straight-forward. Therefore as temporary solution I suggested cleaning the files. We also always set all subfolders of public_html to readonly mode, so vulnerable plugins can't do more harm, but page is still up.

  0

Please sign in to leave a comment.