Malware – Critical Problems

  • Resolved Fleetp

    (@fleetp)


    10 years, 2 months ago

    We received an email advising of critical problems – about 57+ files were involved.

    * File contains suspected malware URL: /home/*****/public_html/wp-content/wfcache/******.com.au_subscribe/~~~~_wfcache.html

    The file listed for each error was:
    http://m3c73.fr/templates/beez_20/628bfktq.php?id=1554325

    Taking Wordfence at face value, we did what we thought was correct at the time and deleted the files. Wrong, it crashed our site. Thankfully we had a backup from yesterday and were able to restore it.

    I am a novice. I am expecting that the same will show up in the next overnight scan.

    Can anyone advise what we should have done or the correct action in this case?

    Thanks,
    Alan.

    https://wordpress.org/plugins/wordfence/

Viewing 4 replies - 1 through 4 (of 4 total)
  • WFBrian

    (@wfbrian)

    10 years, 2 months ago

    Hi Alan,

    Glad to hear you had a backup and were able to restore. I recommend starting with this document from our WordPress Security Fundamentals. It should get you going.

    https://www.wordfence.com/learn/how-to-clean-a-hacked-website/

    -Brian

    Thread Starter Fleetp

    (@fleetp)

    10 years, 2 months ago

    Thanks Brian, should I not delete these files as it suggests and just “ignore” instead?

    I am expecting the same email notification tomorrow after it automatically does an overnight scan. So my main concern is what to do should it say the same again. After today my thought is to ignore it.

    Not had an email from WF like this one in the past – at least not for more than 2 or 3 issues which are usually for updates so easily managed.

    I will go through and review the info in your link as well, thanks.

    Cheers, Alan.

    WFBrian

    (@wfbrian)

    10 years, 2 months ago

    Alan,

    Looks like the files are in wfcache. Try turning off cacheing and then reenabling. This will empty the cache and rebuild it.

    -Brian

    Thread Starter Fleetp

    (@fleetp)

    10 years, 2 months ago

    Cheers, done.
    -Alan.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Malware – Critical Problems’ is closed to new replies.