Support » Fixing WordPress » I've been hacked. Again. Pharm hack? Need help.

  • I have 5 sites, and last weekend upgraded all of them (I think) to the latest 4.2.2, as well as updating plugins & themes. I also switched to brand new themes, because I needed responsive ones for mobile, for Google.

    It’s like the hackers watch you. How did they know I did that? I also have at least Wordfence on each one, as well as Securi, too, on a couple of them.

    I was hacked a couple of months ago, and I guess I didn’t get rid of it all. This time they infected all 5 blogs, not just 3, much worse, and my host just shut them all down until I fix them. I can see everything in my file manager, so the content is still okay there, but of course they’re offline now, so can’t get into my Admin page as usual.

    I have read the list of links. I have read the main one, So you’ve been hacked, about 10 times. It’s very difficult.

    My host sent me a 14 page list of all the infected files/plugins/themes. I can see the same date, a day in Feb, for all of them so far, and it might be connected to a date in December, as well.

    I can delete all the plugins and themes okay. I’m more cautious about the core files, of course. I look up each one to see if it’s listed in this forum – none are, so far. It’s nerveracking – I’m really afraid I’ll delete a core WP file.

    Here is what I don’t understand:
    1. Where can I see my latest version of WP in File Manager?
    2. Can I upload the newest version of WP to my desktop and then manually move each WP file over to the folder?
    3. I read it said keep a couple WP files the same, but now can’t find which ones.
    4. I changed password in ftp & host, but don’t know how to change them for the blogs, using File Manager.
    5. I have some older backups – I’d have to look up the date. I’m really afraid to override all the content I know is in Mysql right now, however.
    6. If I HAD to reinstall, will my images be there?

    I’ll be honest, I’m kind of paralyzed.

Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘I've been hacked. Again. Pharm hack? Need help.’ is closed to new replies.