• Resolved Manish

    (@nims)


    Everything was working fine till yesterday. I got a message regarding malware attack and checked my website had been attacked with eval(base64_decode(“aWY… code injection.
    I cleaned the files and ran wordfence again but then I started getting error message “We could not determine how this WordPress server connects to itself.”

    When I clicked on the http://…..wp-content/plugins/wordfence/wfscan.php?test=1
    I got a strange message
    [ Moderated binary output ]
    Can you help ?

    http://wordpress.org/extend/plugins/wordfence/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Wordfence Security

    (@mmaunder)

    Hi Nims,

    It sounds like our own library may have been the target of a hack. Check the contents of wfscan.php and let me know what you see. Email to mark@wordfence.com

    Thanks,

    Mark.

    Thread Starter Manish

    (@nims)

    Hi Mark … I deactivated and deleted wordfence and then installed again.
    Its working fine now.
    But is there not a way to know from where/which file is our website being hacked into ? Though we keep our wordpress/plugins/themes updated, but there could be some non wordpress core file that might be getting attacked. How can we find that.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Cannot scan after malware code injection attack’ is closed to new replies.