> My host company sent me an email for support, they asked me to remove infected files
Did you do this already ?
What is the prefix listed as in your wp-config.php file under the k1n7t6.ca root ?
https://paulund.co.uk/get-database-table-prefix-in-wordpress
Also login to your phpMyAdmin to check the prefix. And look at the site_url in the _options table to make sure your website address is listed.
https://www.hostdime.com/kb/hd/wordpress/change-wordpress-site-url-via-phpmyadmin
Thread Starter
k1n7t6
(@k1n7t6)
Yes the offending files were deleted from the WordPress folder,many index.php, would you like to see a list of the clam scan.log they sent me. Most are experimental sites on a subfolder, i have a backup of the data bas and a backup of the WordPress folder.
There are over 133 manual deletions required.
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/w6hiwjvs3x_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/uploads/sites/4/elementor/tmp/5d59ca59e89cc/consulting-child/functions.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/bb-plugin/classes/class-fl-builder-service-enormail.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/bb-plugin/js/gikxfume.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/fonts/.ce75e400.ico
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/updraftplus/addons/reporting.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/updraftplus/languages/grotuxwe.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/porto-content-types/languages/ocmzltkb.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/prime-mover/compatibility/PrimeMoverElementorCompat.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/consulting-child/functions.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/flip/engine/theme-options.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/zakra/template-parts/content-page.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/Nexus/js/custom.js
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/omega/page.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/eggnews/template-parts/njgwdhuu.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/twentysixteen/single.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/lakshmi-lite/single.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/flip/engine/theme-options.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/consulting-child/functions.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-10-30-2235_k1n_7t6_350012cc4324-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-09-09-0008_k1n_7t6_03681a8bb477-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-10-29-2152_k1n_7t6_e440a9a5f941-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-12-09-2238_k1n_7t6_199c7e15faf9-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/0.gravatar.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/apis.google.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/app.canada.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ads.pubmatic.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ads.mocean.mobi/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.ottawasun.com_2014_03_17_condo-fraudster-son-off-to-jail/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/assets.pinterest.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/c.jsrdn.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/c.amazon-adsystem.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/connect.facebook.net/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/distroscale.s3.amazonaws.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/enewsletter.postmedia.com/dist/.71a1ffc9.ico
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/fancy.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/flyers.ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/gmpg.org/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/help.weheartit.com/customer/y8cspe7pvt_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/help.weheartit.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/i.jsrdn.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/img.t.sinajs.cn/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/js-sec.indexww.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pentos-cdn.polarmobile.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pixel.quantserve.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pixel.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/platform.foursquare.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/platform.twitter.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s.ytimg.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s0.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s1.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s2.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/schema.org/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s7.addthis.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/st.hzcdn.com/pess1c6ao5_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/st.hzcdn.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/static.chartbeat.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/stats.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/storage.ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/swenzhang.baidu.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/tags.bluekai.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/tjs.sjs.sinajs.cn/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/weheartit.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.addthis.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.canada.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/widgets.outbrain.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.distroscale.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.google-analytics.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.googletagservices.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.googletagmanager.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.houzz.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.smartadserver.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.w3.org/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.youtube.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/SimplePie/Net/ttouxvlz.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/blocks/html/vjqdnupd.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/sodium_compat/namespaced/x7ju4u60bn_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/1/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/11/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/bmoq35f2xh_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/tgk6biacm2_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/forum/cache/beac5c791d8caf5510828d976852a2a1
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/forum/cache/00e5a43aa38ffda58d0e6b9d6f111faa
*******************************************************
Q2, public_html/WordPress/wp-config.php
<?php
/**
* The base configuration for WordPress
*
* The wp-config.php creation script uses this file during the
* installation. You don't have to use the web site, you can
* copy this file to "wp-config.php" and fill in the values.
*
* This file contains the following configurations:
*
* * MySQL settings
* * Secret keys
* * Database table prefix
* * ABSPATH
*
* @link https://wordpress.org/support/article/editing-wp-config-php/
*
* @package WordPress
*/
// ** MySQL settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
/** MySQL database username */
/** MySQL database password */
define( 'DB_PASSWORD', '#########' );
/** MySQL hostname */
/** Database Charset to use in creating database tables. */
define( 'DB_CHARSET', 'utf8' );
/** The Database Collate type. Don't change this if in doubt. */
define( 'DB_COLLATE', '' );
/**#@+
* Authentication Unique Keys and Salts.
*
* Change these to different unique phrases!
* You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
* You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
*
* @since 2.6.0
*/
define( 'AUTH_KEY', 'put your unique phrase here' );
define( 'SECURE_AUTH_KEY', 'put your unique phrase here' );
define( 'LOGGED_IN_KEY', 'put your unique phrase here' );
define( 'NONCE_KEY', 'put your unique phrase here' );
define( 'AUTH_SALT', 'put your unique phrase here' );
define( 'SECURE_AUTH_SALT', 'put your unique phrase here' );
define( 'LOGGED_IN_SALT', 'put your unique phrase here' );
define( 'NONCE_SALT', 'put your unique phrase here' );
/**#@-*/
/**
* WordPress Database Table prefix.
*
* You can have multiple installations in one database if you give each
* a unique prefix. Only numbers, letters, and underscores please!
*/
$table_prefix = 'wp_';
/**
* For developers: WordPress debugging mode.
*
* Change this to true to enable the display of notices during development.
* It is strongly recommended that plugin and theme developers use WP_DEBUG
* in their development environments.
*
* For information on other constants that can be used for debugging,
* visit the documentation.
*
* @link https://wordpress.org/support/article/debugging-in-wordpress/
*/
define( 'WP_DEBUG', false );
define('WP_ALLOW_MULTISITE', true);
define('MULTISITE', true);
define('SUBDOMAIN_INSTALL', false);
define('DOMAIN_CURRENT_SITE', 'k1n7t6.ca');
define('PATH_CURRENT_SITE', '/');
define('SITE_ID_CURRENT_SITE', 1);
define('BLOG_ID_CURRENT_SITE', 1);
define( 'WPPA_MULTISITE_INDIVIDUAL', true ); // Multisite WP 3.5 or later with every site its own albums and photos
define( 'WPPA_MULTISITE_BLOGSDIR', true ); // Multisite prior to WP 3.5 with every site its own albums and photos
define( 'WPPA_MULTISITE_GLOBAL', true ); // Multisite with one common set of albums and photos
/* That's all, stop editing! Happy publishing. */
/** Absolute path to the WordPress directory. */
if ( ! defined( 'ABSPATH' ) ) {
define( 'ABSPATH', __DIR__ . '/' );
}
/** Sets up WordPress vars and included files. */
require_once ABSPATH . 'wp-settings.php';
*******************************************************************************
Q3 phpMyAdmin
all tables begin with WP
<code>wp_10_bwg_album</code>
on query it says:
MySQL returned an empty result set (i.e. zero rows). (Query took 0.0401 seconds.)
I'm looking at <code>wp_10_options</code> (this is really strange, looks corrupted)
option_id
option_name
option_value
autoload
1
siteurl
http://k1n7t6.ca/tagottawa/briansigns
yes
2
home
http://k1n7t6.ca/tagottawa/briansigns
yes
3
blogname
BrianSigns
yes
4
blogdescription
yes
5
users_can_register
0
yes
6
admin_email
yes
-
This reply was modified 5 years, 4 months ago by
Yui. Reason: please use CODE button for proper formatting
Thread Starter
k1n7t6
(@k1n7t6)
thankyou Yui, still learning, you can take down my last post, I will rewrite it. leaving out some particulars.
how can take down my own posts?
k1n7t6
-
This reply was modified 5 years, 4 months ago by
k1n7t6.
The database connection string have already been removed from your earlier post.
So have you gone ahead and removed all those files ?
Thread Starter
k1n7t6
(@k1n7t6)
all the malware files under WordPress have been removed, a bigger problem is that the database seems to be missing the primary, im lost sorry, maybe not an easy fix but something in a backup, i use a plugin called updraft, i have the backups but they may have malware, i just need it up long enough to backup my more important work, i wonder if this would work
1. install WP
add updraft plugin
import the backups and run?
i wonder if that would fix the data base and the wp network?
Yes, sure go ahead and try.
You could install a local copy on your computer – may makes things easier.
https://localwp.com/
or
https://themeisle.com/blog/install-xampp-and-wordpress-locally/
If your website is made with a CMS, then a good place to start is with the original installation files, since they are not infected and available for you to download.
Get a list of all the files that have malware. You can find it in the One.com control panel.
Download the installation files for your CMS. It needs to be the same version as you have installed.
targetehr