WordPress.org

1. modalmusic
   Member
   Posted 4 months ago #

   Hi - I'm fairly new to WP and but have got my site up and running. After DreamHost got hacked at the weekend I decided to install some security plugins. WebsiteDefender has done a scan and found the following:

   wp-content/plugins/extended-comment-options/wp-lteue.php

   Is this something I should be concerned about?

   Many thanks - Modal Music

2. esmi
   Theme Diva & Forum Moderator
   Posted 4 months ago #

   http://codex.wordpress.org/FAQ_My_site_was_hacked
   http://wordpress.org/support/topic/268083#post-1065779
   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
   http://ottopress.com/2009/hacked-wordpress-backdoors/

   http://sitecheck.sucuri.net/scanner/

3. modalmusic
   Member
   Posted 4 months ago #

   Thanks for the info esmi - I'll have a good look at that. Do you know anything about that particular php file I mentioned.

   Thanks - modal

4. esmi
   Theme Diva & Forum Moderator
   Posted 4 months ago #

   Sorry - no. It's plugin-specific.

5. perezbox
   Member
   Posted 4 months ago #

   Hi

   To be safe you could always check the status of your site here: http://sitecheck.sucuri.net. It's a free malware scanner.

   As for the file you referenced, best bet is to copy the code in the file into something like pastebin.com so that we can see the content of the file. The name of the specific file won't tell us if it's bad or good.

   Thanks

6. modalmusic
   Member
   Posted 4 months ago #

   Hi Perezbox - thanks for the reply.

   I think the problem was related to some public files on Amazon S3. I had links to these from my WP site and it's those that came up as malicious. I got rid of all of them, installed BulletProof Security and then scanned with 'sucuri' and it came up clear - relief!

   Will definitely check out pastebin.com though, sounds useful.

   Thanx - modal
   http://www.modalmusic.biz

Reply

You must log in to post.