Moderator
t-p
(@t-p)
This is sadly relatively common. It means your account has been compromised, be it through a guessed at password, or possibly an outdated version of something which hackers have found and are exploiting for their own nefarious ends.
There is no instant fix. Your website files will need to be gone over “with a fine-tooth comb” and cleaned up to return your service back to clean and shiny self.
Thread Starter
Chris
(@chris_bswish)
Thank you Tara and The Hack Repair Guy for the responses!
Is there any tips or tricks that might help me target a general area to focus on? I was going to attempt to start the process of elimination with the plugins, disabling them one at a time and seeing if it will occur again.
The site is pretty large and complex, it would take days to comb through it all.
I am really regretting not making a backup closer to the hack date
Much like bringing your car into the shop for repair. We can hear the noise, but without popping the hood, it’s hard to say whether it’s your water pump or your alternator…
Andrew Nevins
(@anevins)
WCLDN 2018 Contributor | Volunteer support
Not that we’re asking to look under the hood!
Thread Starter
Chris
(@chris_bswish)
Good point The Hack Repair Guy
and understood Andrew.
I know W3 total cache just released an update yesterday that claimed some security issues. I cleared out all the files for total cache (all the files to my knowledge) but the issue is still occurring.
The strange thing is that it isnt showing up on any malware scans and not changing my site’s visual appearance
