You must be logged in to post Login


Lost Your Password?

Search Forums:


 






Minimum search word length is 4 characters – Maximum search word length is 84 characters
Wildcard Usage:
*  matches any number of characters    %  matches exactly one character

Infected WordPress Files

UserPost

9:33 am
April 22, 2014


Buck Inspire

Member

posts 1546

Hi All,

 

My webhost suspended my site because almost all my WordPress files got infected over the weekend.  I've been deleting plugins, but am not sure how to deal with the core files.  My backup isn't up to date and I've been through a few updates.  Does anyone have a good reference on how to deal with this?  Thanks!

1:49 pm
April 24, 2014


FamilyMoneyValues

Member

posts 812

What a bummer!
Does your host have any backup that you could use?
Are they sure the core files are infected?
I hate to say it but you may have to take the backup you do have and reapply your updates.

FamilyMoneyValues
Blog: http:blog.familymoneyvalues.com
Facebook: http://www.facebook.com/Family…..neyValues/  

8:31 am
April 25, 2014


Edward Antrobus

Fort Collins, CO

Member

posts 1008

As long as the database isn't infected, you can back that up now and then do a fresh WordPress install

 I'm looking for editors, beta-readers, and some demographic research for my upcoming novel, Once Upon a Saturn Moon. If you like reading soft sci-fi thrillers, maybe with a touch of romance thrown in, you can find more information at http://seampublishing.com/once…..aturn-moon

If You Can Read, You Can Cookhttp://www.ifyoucanread.com | Think you can't cook? If you can read this sentence, then you can.

SEAM Publishinghttp://www.seampublishing.com | eBook formatting and publishing service

10:07 am
April 28, 2014


Eric – PersonalProfitability.com

Portland, OR

Member

posts 2120

I would scan with Wordfence, that may be able to fix everything.

5:49 pm
April 28, 2014


Buck Inspire

Member

posts 1546

Post edited 5:52 pm – April 28, 2014 by Buck Inspire


Hi Marie, Edward, and Eric,

 

Thanks for your replies!  I did a search for infected WordPress files and followed some of the articles.

 

I backed up everything I could.  My WordPress directories and database files via my webhost Control Panel.

I moved my directories into a new infected folder and started to delete all files with issues according to my webhost scans.

I downloaded the latest version of WordPress, 3.9 at the time, unzipped them and uploaded them back to my webhost.

I opened my old wp-config.php file and copied my database name, username, and password.

I pasted this information into the wp-config sample file and renamed it wp-config.php.

I moved my clean files back into their original locations (pictures, audio files, etc.)

I uploaded the htaccess file back to its original location.  Without it, all my links were broken.

I reinstalled plugins.

 

I hope no one needs to go through this, but if you do, the best advice I saw was stay calm.  Also, I changed my passwords and will setup a backup schedule to regularly backup my files.

 

Buck

11:07 am
May 7, 2014


moneystepper

Member

posts 182

Phez – glad you got it sorted. Thanks for the reminder to back up regularly!! :)

9:48 am
May 10, 2014


colormefrugal

Member

posts 99

Does anybody know how this happens or what we could do to prevent Wordpress files from being infected? I know there are paid programs that you can use that charge so much per month but I've tried to avoid that so far. I do have Wordfence and another security plugin installed on my site. Is that enough?

12:09 pm
May 10, 2014


Edward Antrobus

Fort Collins, CO

Member

posts 1008

colormefrugal said:

Does anybody know how this happens or what we could do to prevent Wordpress files from being infected? I know there are paid programs that you can use that charge so much per month but I've tried to avoid that so far. I do have Wordfence and another security plugin installed on my site. Is that enough?

Make sure you have strong passwords everywhere. WP login, database, hosting, etc. Limit login attempts. If your home IP address is stable, you can even limit access to the login page to that IP address. You can't hack what you can't see…

Besides that, always make sure WP and all plugins are kept up-to-date. Limit plugins to those you absolutely need and drop any that haven't been updated in a while.

 I'm looking for editors, beta-readers, and some demographic research for my upcoming novel, Once Upon a Saturn Moon. If you like reading soft sci-fi thrillers, maybe with a touch of romance thrown in, you can find more information at http://seampublishing.com/once…..aturn-moon

If You Can Read, You Can Cookhttp://www.ifyoucanread.com | Think you can't cook? If you can read this sentence, then you can.

SEAM Publishinghttp://www.seampublishing.com | eBook formatting and publishing service


About the Yakezie.com Forum

Forum Timezone: America/Los_Angeles

Forum Stats:

Groups: 2
Forums: 9
Topics: 6383
Posts: 84794

Membership:

There are 13652 Members
There have been 20 Guests

There are 9 Admins
There are 8 Moderators

Top Posters:

My Personal Finance Journey – 3159
Khaleef @ KNS Financial – 3149
Budgeting in the Fun Stuff – 3048
Sustainable PF – 2759
Miss T @ Prairie Eco-Thrifter – 2213
Eric – PersonalProfitability.com – 2120

Administrators: The College Investor (1935 Posts), Financial Samurai (1803 Posts), LaTisha @YoungFinances (1715 Posts), Forest Parks (1337 Posts), 20s Finances (1147 Posts), Money Reasons (697 Posts), Chris Johnson (78 Posts), Sydney at Untemplater (0 Posts), Suba (0 Posts)

Moderators: Suba @ Wealth Informatics (1876 Posts), sooverthis (1041 Posts), PK @ DQYDJ (361 Posts), jmichelsen (208 Posts), Ramona (13 Posts), JeremyNJohnson (4 Posts), Moderator (0 Posts), rackgeek (0 Posts)