WordPress.org

Ready to get started?Download WordPress

Forums

Virus attack by SonicWALL (6 posts)

  1. Danny Bahl
    Member
    Posted 1 year ago #

    Suddenly my home page looks like this:
    http://dannybahl.dk

    The hole site is working, except the home page.

    I've tried three virus scan plugins, but none of them found anything, and i have looked in my folders - but nothing.

    Anyone knows wtf this is, and how to get rid of it?

  2. Jamàl
    Member
    Posted 1 year ago #

    The reason is somebody (probably a hacker) has placed an index.html file in your WordPress root.

    1. Go to your file manager and remove the index.html file there.

    2. Change your passwords for cpanel, ftp, WordPress, etc...

    3. Go to your WordPress updates screen and update/re-update.

    4. Read the recommendations in this Codex page: http://codex.wordpress.org/FAQ_My_site_was_hacked

  3. adpawl
    Member
    Posted 1 year ago #

  4. Danny Bahl
    Member
    Posted 1 year ago #

    No - nothing!

    There are no index.html files (only php).
    The index files have been checked.
    the home page have been checked in the editor.
    the htaccess files are OK.
    The spam comments are deleted.
    All the online scanners above found nothing.
    The DB prefix have been changed.
    I have updated themes and plugins.

    I don't get it ...?
    It's not like the site is crashed. Everything works. It just shows a wrong homepage.

    Maybe there is something in the DB?

  5. Jamàl
    Member
    Posted 1 year ago #

    If you visit http://dannybahl.dk/page/1 you will see your homepage, and since this works, the virus notice seems to stem from a source outside the WordPress original files.

    SonicWall is not a virus, but a company that provides a network security appliances to web hosts, etc... The reason you get this warning could be that SonicWall have detected a virus on your host server, and the virus could be hidden somewhere outside your capability.

    In this case, the best option would be to contact your host.

  6. Danny Bahl
    Member
    Posted 1 year ago #

    That makes sence.
    I'll do that.
    Thanks!

Topic Closed

This topic has been closed to new replies.

About this Topic