Admin log-in being redirected – Malware?

voyager2
(@voyager2)

11 years, 6 months ago

Whilst loading a new plug-in from the WordPress plug-in site when logged in as admin, a window popped up stating that WordPress was updating the database. The site locked up for a moment and when it returned the dashboard was logged into a “Warp Master Theme” rather than the site that I was working on. All the site details had been replaced except for the “Users” and the “plug-ins” which were now deactivated.
All the pages had been replaced with the Warp Master Theme Template
I restored a recent back up and now on the web the site appears to act normally.
But when I attempt to log in under wp-login.php I am directed to this “warp master theme” dashboard
Any ideas on what has occurred and how to rectify the situation would be gratefully accepted

Viewing 9 replies - 1 through 9 (of 9 total)

Moderator James Huff
(@macmanx)

11 years, 6 months ago

Try downloading WordPress again and delete then replace your copies of everything except the wp-config.php file and the /wp-content/ directory with fresh copies from the download. This will effectively replace all of your core files without damaging your content and settings. Some uploaders tend to be unreliable when overwriting files, so don’t forget to delete the original files before replacing them.

Thread Starter voyager2
(@voyager2)

11 years, 6 months ago

James

Thank you very much for this advice. I will try it now!!!

Moderator James Huff
(@macmanx)

11 years, 6 months ago

You’re welcome!

Thread Starter voyager2
(@voyager2)

11 years, 6 months ago

Ok James

Tried this

The site opened but only on the home page. All other pages give a 404 Page Not Found Message

And when trying to log on to admin I am still being redirected to “Warp Master Theme” dashboard.

Any other ideas please.????

Thanks very much

Thread Starter voyager2
(@voyager2)

11 years, 6 months ago

As restoring a clean version of the site did not work tried restoring a database from before the problem occurred

Now when I attempt the Admin log-in, the Word Press log in window pops up with the correct “return to SITE.com” at the foot

But when I enter the U/N and Password…… up pops the update the data base message.

The address in the panel is http://www.SITE.com/wp-admin/upgrade.php?_wp_http_referer=%2Fwp-admin%2F

I think that this is where the redirect is coming into play??

The site hosts say “That screen normally comes up when you’re running an older version of the database compared to the current version of the files.”

What do the authorisation keys do? Should I get new keys from https://api.wordpress.org/secret-key/1.1/salt/

Any help gratefully received

Moderator James Huff
(@macmanx)

11 years, 6 months ago

But when I enter the U/N and Password…… up pops the update the data base message.

Did you click the button to update the database?

What do the authorisation keys do? Should I get new keys from https://api.wordpress.org/secret-key/1.1/salt/

They ensure better encryption and allow you to invalidate existing cookies for the domain: https://codex.wordpress.org/Editing_wp-config.php#Security_Keys

If you’re worried you were hacked, you should replace those, but only after you’re sure everything is back to normal.

Thread Starter voyager2
(@voyager2)

11 years, 6 months ago

When the problem first occurred I did click the button to update the data base, and this is when the redirects started.

So I am l loathe to try that again!!!!!

Thread Starter voyager2
(@voyager2)

11 years, 6 months ago

The address in the panel is http://www.SITE.com/wp-admin/upgrade.php?_wp_http_referer=%2Fwp-admin%2F

Does this address look legitimate to you????

Thanks for your help

Moderator James Huff
(@macmanx)

11 years, 6 months ago

Yep, that’s legitimate. 🙂

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Admin log-in being redirected – Malware?’ is closed to new replies.

Admin log-in being redirected – Malware?

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics