WordPress.org

Ready to get started?Download WordPress

Forums

How to remove trojan virus from wordpress? (3 posts)

  1. borbou
    Member
    Posted 2 years ago #

    Hello to everyone,

    so i uploaded my wordpress to a freehost (x10 hosting) and a week after i got hacked by some indonesian hacker..

    When i realized, I just replaced index.php and everything went back to normal for my website.

    Now I want to move to a paid host (because of the downtime) so I downloaded all the files and database in order to upload it to my new host.But nod32 has found several (5 or 6) files that have been infected with trojav viruses (and deleted them)

    I scaned my local disk but there is not any other threat in my computer.

    What should I do? now that my files are clean (according to nod32) i should upload them and there is no problem(but some files that nod erased will be missed)? or should i try a fresh install?

    Any help would me much appreciated!!
    thank u in advance!

  2. esmi
    Theme Diva & Forum Moderator
    Posted 2 years ago #

  3. borbou
    Member
    Posted 2 years ago #

    hello again and thanx for the reply...
    Eset showed that the following php files are infected with "PHP/C99Shell.NAG trojan"

    wp-content\themes\sportpress\scripts\cache\jancok.php
    wp-content\themes\sportpress\scripts\cache\newfile.php
    wp-includes\class-wp-xmlrpc-client.php
    Which now have been deleted...

    I'm uploading all the files to a new server.Is it ok that i deleted those files or are essential to wordpress install to work ? I'm I ok to upload the files to a new server without fresh install ?

    thanks everyone.

Topic Closed

This topic has been closed to new replies.

About this Topic