• My host company sent me an email for support, they asked me to remove infected files using a clam scan. When I go to log in I get a setup page.

    “Database name
    Database username
    Database password
    Database host
    Table prefix (if you want to run more than one WordPress in a single database)
    We’re going to use this information to create a wp-config.php file. If for any reason this automatic file creation doesn’t work, don’t worry. All this does is fill in the database information to a configuration file. You may also simply open wp-config-sample.php in a text editor, fill in your information, and save it as wp-config.php. Need more help? We got it.

    In all likelihood, these items were supplied to you by your Web Host. If you don’t have this information, then you will need to contact them before you can continue. If you’re all ready…”

    Here what the support sent me

    “I understand it is important to get this website issue fixed as soon as possible.

    I have checked your website http://k1n7t6.ca/ and it is redirecting to the URL: http://k1n7t6.ca/tagottawa/ . I have see that you are using multi site WordPress website. However, database prefix is set as wp_and I have checked database: ss_dbname_jjck3ml4kn and site, Home is set as: http://k1n7t6.ca/tagottawa/ .Also, I was able to find many database prefix in your account. But unable to find main database prefix. It is advisable update the proper database prefix so that you should be able to access the website.

    For testing purpose, I have updated the database name wrd_h3f3ece1g3 for the website but still not able to access the website. I have undo the changes. Can you please provide the exact database prefix would like to set the WordPress website? Or please upload the all files and database from local backup if any.

    A heads up, we will not make any changes without your permission. So there is no changes made from our end.””””””
    1. my wordpress install is public_html/WordPress
    2. my fifteen websites are under k1n7t6.ca
    3. I cannot reach my websites, k1n7t6.ca or tagottawa.com

    Please advise what i need to correct before everything is corrupted
    sincerly

    The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)
  • > My host company sent me an email for support, they asked me to remove infected files

    Did you do this already ?

    What is the prefix listed as in your wp-config.php file under the k1n7t6.ca root ?
    https://paulund.co.uk/get-database-table-prefix-in-wordpress

    Also login to your phpMyAdmin to check the prefix. And look at the site_url in the _options table to make sure your website address is listed.
    https://www.hostdime.com/kb/hd/wordpress/change-wordpress-site-url-via-phpmyadmin

    Thread Starter k1n7t6

    (@k1n7t6)

    Yes the offending files were deleted from the WordPress folder,many index.php, would you like to see a list of the clam scan.log they sent me. Most are experimental sites on a subfolder, i have a backup of the data bas and a backup of the WordPress folder.
    There are over 133 manual deletions required.

    
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/w6hiwjvs3x_index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/uploads/sites/4/elementor/tmp/5d59ca59e89cc/consulting-child/functions.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/bb-plugin/classes/class-fl-builder-service-enormail.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/bb-plugin/js/gikxfume.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/fonts/.ce75e400.ico
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/updraftplus/addons/reporting.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/updraftplus/languages/grotuxwe.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/porto-content-types/languages/ocmzltkb.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/prime-mover/compatibility/PrimeMoverElementorCompat.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/consulting-child/functions.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/flip/engine/theme-options.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/zakra/template-parts/content-page.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/Nexus/js/custom.js
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/omega/page.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/eggnews/template-parts/njgwdhuu.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/twentysixteen/single.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/lakshmi-lite/single.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/flip/engine/theme-options.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/consulting-child/functions.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-10-30-2235_k1n_7t6_350012cc4324-wpcore.zip
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-09-09-0008_k1n_7t6_03681a8bb477-wpcore.zip
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-10-29-2152_k1n_7t6_e440a9a5f941-wpcore.zip
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-12-09-2238_k1n_7t6_199c7e15faf9-wpcore.zip
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Ottawasun.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/0.gravatar.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/apis.google.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/app.canada.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ads.pubmatic.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ads.mocean.mobi/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.ottawasun.com_2014_03_17_condo-fraudster-son-off-to-jail/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/assets.pinterest.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/c.jsrdn.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/c.amazon-adsystem.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/connect.facebook.net/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/distroscale.s3.amazonaws.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/enewsletter.postmedia.com/dist/.71a1ffc9.ico
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/fancy.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/flyers.ottawasun.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/gmpg.org/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/help.weheartit.com/customer/y8cspe7pvt_index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/help.weheartit.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/i.jsrdn.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/img.t.sinajs.cn/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/js-sec.indexww.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pentos-cdn.polarmobile.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ottawasun.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pixel.quantserve.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pixel.wp.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/platform.foursquare.com/index.php
    
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/platform.twitter.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s.ytimg.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s0.wp.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s1.wp.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s2.wp.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/schema.org/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s7.addthis.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/st.hzcdn.com/pess1c6ao5_index.php
    
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/st.hzcdn.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/static.chartbeat.com/index.php
    
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/stats.wp.com/index.php
    
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/storage.ottawasun.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/swenzhang.baidu.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/tags.bluekai.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/tjs.sjs.sinajs.cn/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/weheartit.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.addthis.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.canada.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/widgets.outbrain.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.distroscale.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.google-analytics.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.googletagservices.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.googletagmanager.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.houzz.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.smartadserver.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.w3.org/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.youtube.com/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/SimplePie/Net/ttouxvlz.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/blocks/html/vjqdnupd.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/sodium_compat/namespaced/x7ju4u60bn_index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/1/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/11/index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/bmoq35f2xh_index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/tgk6biacm2_index.php
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/forum/cache/beac5c791d8caf5510828d976852a2a1
    /home/users/web/b2831/nf.k1n7t6/public_html/WordPress/forum/cache/00e5a43aa38ffda58d0e6b9d6f111faa
    *******************************************************
    Q2, public_html/WordPress/wp-config.php
    <?php
    /**
     * The base configuration for WordPress
     *
     * The wp-config.php creation script uses this file during the
     * installation. You don't have to use the web site, you can
     * copy this file to "wp-config.php" and fill in the values.
     *
     * This file contains the following configurations:
     *
     * * MySQL settings
     * * Secret keys
     * * Database table prefix
     * * ABSPATH
     *
     * @link https://wordpress.org/support/article/editing-wp-config-php/
     *
     * @package WordPress
     */
    
    // ** MySQL settings - You can get this info from your web host ** //
    /** The name of the database for WordPress */
    
    /** MySQL database username */
    
    /** MySQL database password */
    define( 'DB_PASSWORD', '#########' );
    
    /** MySQL hostname */
    
    /** Database Charset to use in creating database tables. */
    define( 'DB_CHARSET', 'utf8' );
    
    /** The Database Collate type. Don't change this if in doubt. */
    define( 'DB_COLLATE', '' );
    
    /**#@+
     * Authentication Unique Keys and Salts.
     *
     * Change these to different unique phrases!
     * You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
     * You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
     *
     * @since 2.6.0
     */
    define( 'AUTH_KEY',         'put your unique phrase here' );
    define( 'SECURE_AUTH_KEY',  'put your unique phrase here' );
    define( 'LOGGED_IN_KEY',    'put your unique phrase here' );
    define( 'NONCE_KEY',        'put your unique phrase here' );
    define( 'AUTH_SALT',        'put your unique phrase here' );
    define( 'SECURE_AUTH_SALT', 'put your unique phrase here' );
    define( 'LOGGED_IN_SALT',   'put your unique phrase here' );
    define( 'NONCE_SALT',       'put your unique phrase here' );
    
    /**#@-*/
    
    /**
     * WordPress Database Table prefix.
     *
     * You can have multiple installations in one database if you give each
     * a unique prefix. Only numbers, letters, and underscores please!
     */
    $table_prefix = 'wp_';
    
    /**
     * For developers: WordPress debugging mode.
     *
     * Change this to true to enable the display of notices during development.
     * It is strongly recommended that plugin and theme developers use WP_DEBUG
     * in their development environments.
     *
     * For information on other constants that can be used for debugging,
     * visit the documentation.
     *
     * @link https://wordpress.org/support/article/debugging-in-wordpress/
     */
    define( 'WP_DEBUG', false );
    define('WP_ALLOW_MULTISITE', true);
    
    define('MULTISITE', true);
    define('SUBDOMAIN_INSTALL', false);
    define('DOMAIN_CURRENT_SITE', 'k1n7t6.ca');
    define('PATH_CURRENT_SITE', '/');
    define('SITE_ID_CURRENT_SITE', 1);
    define('BLOG_ID_CURRENT_SITE', 1);
    
    define( 'WPPA_MULTISITE_INDIVIDUAL', true ); // Multisite WP 3.5 or later with every site its own albums and photos
    define( 'WPPA_MULTISITE_BLOGSDIR', true ); // Multisite prior to WP 3.5 with every site its own albums and photos
    define( 'WPPA_MULTISITE_GLOBAL', true ); // Multisite with one common set of albums and photos
    /* That's all, stop editing! Happy publishing. */
    
    /** Absolute path to the WordPress directory. */
    if ( ! defined( 'ABSPATH' ) ) {
    	define( 'ABSPATH', __DIR__ . '/' );
    }
    
    /** Sets up WordPress vars and included files. */
    require_once ABSPATH . 'wp-settings.php';
    *******************************************************************************
    Q3  phpMyAdmin
    all tables begin with WP
    <code>wp_10_bwg_album</code>
    on query it says:
    MySQL returned an empty result set (i.e. zero rows). (Query took 0.0401 seconds.)
    
    I'm looking at <code>wp_10_options</code>             (this is really strange, looks corrupted)
    
    option_id
    option_name
    option_value
    autoload
    1
    siteurl
    http://k1n7t6.ca/tagottawa/briansigns
    yes
    2
    home
    http://k1n7t6.ca/tagottawa/briansigns
    yes
    3
    blogname
    BrianSigns
    yes
    4
    blogdescription
    yes
    5
    users_can_register
    0
    yes
    6
    admin_email
    
    yes
    
    • This reply was modified 5 years, 4 months ago by Yui. Reason: please use CODE button for proper formatting
    Thread Starter k1n7t6

    (@k1n7t6)

    thankyou Yui, still learning, you can take down my last post, I will rewrite it. leaving out some particulars.
    how can take down my own posts?
    k1n7t6

    • This reply was modified 5 years, 4 months ago by k1n7t6.

    The database connection string have already been removed from your earlier post.
    So have you gone ahead and removed all those files ?

    Thread Starter k1n7t6

    (@k1n7t6)

    all the malware files under WordPress have been removed, a bigger problem is that the database seems to be missing the primary, im lost sorry, maybe not an easy fix but something in a backup, i use a plugin called updraft, i have the backups but they may have malware, i just need it up long enough to backup my more important work, i wonder if this would work
    1. install WP
    add updraft plugin
    import the backups and run?
    i wonder if that would fix the data base and the wp network?

    Yes, sure go ahead and try.
    You could install a local copy on your computer – may makes things easier.
    https://localwp.com/
    or
    https://themeisle.com/blog/install-xampp-and-wordpress-locally/

    If your website is made with a CMS, then a good place to start is with the original installation files, since they are not infected and available for you to download.
    Get a list of all the files that have malware. You can find it in the One.com control panel.
    Download the installation files for your CMS. It needs to be the same version as you have installed.

    targetehr

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Data base configuration’ is closed to new replies.