WordPress.org

1. fbaillie
   Member
   Posted 1 year ago #
   

   I am not a WordPrsss user but a friend asked me to look at his WordPress site. He uploaded a bunch of files but he said don't bother before I looked at them.

   Having left it for a year and hearing nothing more I decided to delete the folder fromm my drive. Now I keep getting a buch of files and folders with names like - AQT{B1A3BC78-C805-4B26-BC18-2DA4355A53F0}.

   Once I finally delete them they just reappear with many sub folders.

   What canm I do to get rid of these folders and files?

   Thanks

2. Ipstenu (Mika E.)
   Half-Elf Support Rogue & Mod
   Posted 1 year ago #
   

   Change all your passwords.

3. fbaillie
   Member
   Posted 1 year ago #
   

   There are no passwords - WordPress was newver installed.

4. michael.mariart
   Member
   Posted 1 year ago #
   

   Get a better virus scanner.

   If it's happening on your hard drive, then some program is adding them back in all the time. this is one of the biggest signs of an infected PC that you can get. You should either upgrade your current anti-virus software, change to something else that works better, or re-install the operating system to make sure that it's all gone (until it gets infected again).

5. Ipstenu (Mika E.)
   Half-Elf Support Rogue & Mod
   Posted 1 year ago #
   

   There are no passwords - WordPress was newver installed.

   On your server. Your SSH/FTP password, your email passwords. Change 'em.

6. fbaillie
   Member
   Posted 1 year ago #
   

   The directory was never uploaded to my server, this is happening on my home computer.

   I scanned with MS Essentials, nothing found, I got Norton 360 and am now scanning with it.

   I'll report any findings.

   Thanks for looking at this.

7. Ipstenu (Mika E.)
   Half-Elf Support Rogue & Mod
   Posted 1 year ago #
   

   Bleah, then you need to run a better virus scan, but it's not related to WP.

8. fbaillie
   Member
   Posted 1 year ago #
   

   You know this gets weirder.

   I downloaded and ran a full scan with Norton anti-virus, nothing. I then went into their support chat room which I had paid for when I bought the program. After almost 2 hrs. they say it is definitely not a virus.

   The files being generated all start with AQT{ and an bunch of hexidecimal characters after. Since Google says AQT files are "Advanced Query Control", these must come from a database program probably run in Unix.

   I won't bother you any more but if someone has an idea I'd love to hear it.

   Thanks again.

Topic Closed

This topic has been closed to new replies.