WordPress.org

Ready to get started?Download WordPress

Forums

[resolved] site was hacked with the following codes planted under the main directory (9 posts)

  1. greentea007
    Member
    Posted 1 year ago #

    hi all,

    recently encountered a weird thing. one of my client's site was hacked and planted with the following codes (some parts are deleted):

    anyone can tell what are the codes about? anyone has similar experience?

    thanks.

    ---------------------------------------------------

    [ Removed. Please do not post malware scripts here, use pastebin.com if you must share. ]

  2. The Hack Repair Guy
    Member
    Posted 1 year ago #

    Fairly standard back door hacker scripts. Sadly, this means your website has been compromised. I’ve worked on this type of compromise before. This will require someone review every file on the website, remove any/all malware and repair damaged files once found. If you have not done so already I recommend changing all passwords as well (FTP, dashboard, etc.).

  3. greentea007
    Member
    Posted 1 year ago #

    Thanks for the reply!

    May I know what information they are trying to gather from the codes?

  4. esmi
    Theme Diva & Forum Moderator
    Posted 1 year ago #

  5. greentea007
    Member
    Posted 1 year ago #

    [to webmaster: sorry about that, won't share the mal script anymore. (although I purposely deleted some parts of the codes]

    a quick updates of my problem:

    After deleting the malscript, my sites still showed "malware attached". Spent 6 hours to figure out the problem. eventually wp3 total cache was deleted, which solved the problem.

    so for those who have similar experience, try my solution if you also have the plugin.

    now, decided to give up the plugin

  6. esmi
    Theme Diva & Forum Moderator
    Posted 1 year ago #

    The issue was not the plugin. Your site was hacked and wp3 total cache still had a copy of the hack script in its cache.

  7. greentea007
    Member
    Posted 1 year ago #

    oh, yes, should be this way.

    will the hack script in the cache affect the site?

  8. esmi
    Theme Diva & Forum Moderator
    Posted 1 year ago #

    Yes.

  9. greentea007
    Member
    Posted 1 year ago #

    ok. thanks!

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.