Infected WordPress Files | Help Desk | Yakezie Forums

Hi All,

My webhost suspended my site because almost all my WordPress files got infected over the weekend.  I've been deleting plugins, but am not sure how to deal with the core files.  My backup isn't up to date and I've been through a few updates.  Does anyone have a good reference on how to deal with this?  Thanks!

As long as the database isn't infected, you can back that up now and then do a fresh WordPress install

Post edited 5:52 pm – April 28, 2014 by Buck Inspire

Hi Marie, Edward, and Eric,

Thanks for your replies!  I did a search for infected WordPress files and followed some of the articles.

I backed up everything I could.  My WordPress directories and database files via my webhost Control Panel.

I moved my directories into a new infected folder and started to delete all files with issues according to my webhost scans.

I downloaded the latest version of WordPress, 3.9 at the time, unzipped them and uploaded them back to my webhost.

I opened my old wp-config.php file and copied my database name, username, and password.

I pasted this information into the wp-config sample file and renamed it wp-config.php.

I moved my clean files back into their original locations (pictures, audio files, etc.)

I uploaded the htaccess file back to its original location.  Without it, all my links were broken.

I reinstalled plugins.

I hope no one needs to go through this, but if you do, the best advice I saw was stay calm.  Also, I changed my passwords and will setup a backup schedule to regularly backup my files.

Buck

Does anybody know how this happens or what we could do to prevent Wordpress files from being infected? I know there are paid programs that you can use that charge so much per month but I've tried to avoid that so far. I do have Wordfence and another security plugin installed on my site. Is that enough?