WordPress.org

1. ics2s3b
   Member
   Posted 9 months ago #

   Hi,

   I help run http://www.cornellschoolofdance.co.uk.

   The site appeared to get hacked about a week ago where we couldn't get in to wp-admin and it came up saying something along the lines of PHPremoteview.

   I managed to sort this thanks to the forum, but now, two random .php files have materialised and now when I log in to the site, it redirects to a random site after about 3 seconds. I've deleted these random .php files only for them to re-appear.

   HELP!!

2. bordeauxwoman
   Member
   Posted 9 months ago #

   can you tell me what you did to get back into wp-admin? I'm having the same problem. Thanks.

3. ics2s3b
   Member
   Posted 9 months ago #

   Hey there,

   Go to wp-admin, and delete 'common.php' 'udp.php'.

   Then, go in to wp-admin/js and there should be a file with a stupid name with lots of numbers and delete that.

   That's pretty much what I did and it worked.

   Also, check out these threads:
   http://bit.ly/ojQ4sC
   http://wordpress.org/support/topic/attention-igit-related-posts-with-thumb-image-after-posts-phpremoteview-attack?replies=13

Reply

You must log in to post.