Title: All Plugins deactivated hack
Last modified: August 22, 2016

---

# All Plugins deactivated hack

 *  [kicker](https://wordpress.org/support/users/kicker/)
 * (@kicker)
 * [11 years, 3 months ago](https://wordpress.org/support/topic/all-plugins-deactivated-hack/)
 * This happened the other day and I got it up and running by FTP deleting and then
   installing all the plugins. But when I added a new plugin today it happened all
   over again. Last time I noticed the bad code in the Wp-config.php file and took
   it out, I got it all working, but I think even then that code was everywhere.
 * It doesn’t look good! 🙂 I checked and found several hundred lines of what looks
   like machine code in EVERY .PHP file in wordpress, including plugins themes, 
   all php files, and all other wordpress sites on the server as well.
 * Perhaps showing the code that has been put on the top of all .php files can help
   find what the hack is and how best to deal with it. Here it is above the top 
   of each .php file in all wordpress sites on my Godaddy, shared, cPanel lite.
 * Thanx for any advice
    Kicker _ [hack code removed – please do not post that on
   these forums]

Viewing 1 replies (of 1 total)

 *  [WPyogi](https://wordpress.org/support/users/wpyogi/)
 * (@wpyogi)
 * [11 years, 3 months ago](https://wordpress.org/support/topic/all-plugins-deactivated-hack/#post-5750304)
 * Sorry to hear that – have you gone through these? We post them frequently:
 * [http://codex.wordpress.org/FAQ_My_site_was_hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked)
   
   [http://wordpress.org/support/topic/268083#post-1065779](http://wordpress.org/support/topic/268083#post-1065779)
   [http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/](http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/)
   [http://ottopress.com/2009/hacked-wordpress-backdoors/](http://ottopress.com/2009/hacked-wordpress-backdoors/)
   [http://www.jtpratt.com/how-to-fix-a-hacked-wordpress-blog/](http://www.jtpratt.com/how-to-fix-a-hacked-wordpress-blog/)
   [http://sakinshrestha.com/wordpress/fix-if-your-wordpress-site-is-hacked/](http://sakinshrestha.com/wordpress/fix-if-your-wordpress-site-is-hacked/)
   [http://www.wpbeginner.com/wp-tutorials/how-to-find-a-backdoor-in-a-hacked-wordpress-site-and-fix-it/](http://www.wpbeginner.com/wp-tutorials/how-to-find-a-backdoor-in-a-hacked-wordpress-site-and-fix-it/)
 * Harden your WP installation: [http://codex.wordpress.org/Hardening_WordPress](http://codex.wordpress.org/Hardening_WordPress)
 * Additional Resources:
    [http://sitecheck.sucuri.net/scanner/](http://sitecheck.sucuri.net/scanner/)
   [http://www.unmaskparasites.com/](http://www.unmaskparasites.com/) [http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html](http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html)
   [http://wordpress.tv/2014/02/02/brennen-byrne-and-sam-hotchkiss-security-best-practices/](http://wordpress.tv/2014/02/02/brennen-byrne-and-sam-hotchkiss-security-best-practices/)
 * Also be sure to talk to GoDaddy – sounds like the entire server was hacked.

Viewing 1 replies (of 1 total)

The topic ‘All Plugins deactivated hack’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 1 reply
 * 2 participants
 * Last reply from: [WPyogi](https://wordpress.org/support/users/wpyogi/)
 * Last activity: [11 years, 3 months ago](https://wordpress.org/support/topic/all-plugins-deactivated-hack/#post-5750304)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics