Title: Site infected with PHP Script
Last modified: August 30, 2016

---

# Site infected with PHP Script

 *  [laurahilbun](https://wordpress.org/support/users/laurahilbun/)
 * (@laurahilbun)
 * [10 years, 8 months ago](https://wordpress.org/support/topic/site-infected-with-php-script/)
 * Our web host, Bravenet, notified us that we have a possible PHP script issue 
   on our site: [http://www.dallashandknittersguild.com](http://www.dallashandknittersguild.com).
 * I’ve seen several spam posts under a former admin’s profile. I delete them, but
   they keep coming back even after I changed the profile from “contributor” to “
   subscriber”. I’ve now deleted that profile altogether. But I think they’re related
   to the PHP scrip issue.
 * Bravenet provided the following info:
 * Threats found during site scan:
 *  /dallashandknittersguild.com/wp-content/plugins/wp-db-backup-made/system.php:
   PHP.Shell-38 FOUND
    /dallashandknittersguild.com/wp-content/plugins/wp-db-backup-
   made/w5304n.php: Trojan.PHP-43 FOUND /dallashandknittersguild.com/wp-content/
   plugins/wp-db-backup-made/lindex.php: Trojan.PHP-43 FOUND /dallashandknittersguild.
   com/wp-content/plugins/wp-db-backup-made/wp-conf.php: Trojan.PHP-43 FOUND /dallashandknittersguild.
   com/wp-content/plugins/wp-conf.php: Trojan.PHP-43 FOUND /dallashandknittersguild.
   com/wp-content/wp-conf.php: Trojan.PHP-43 FOUND /dallashandknittersguild.com/
   wp-conf.php: Trojan.PHP-43 FOUND
 * I don’t know how to clean this up. Please help.

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [David Uzelac](https://wordpress.org/support/users/daviduzelac/)
 * (@daviduzelac)
 * [10 years, 8 months ago](https://wordpress.org/support/topic/site-infected-with-php-script/#post-6755959)
 * Have you read these two sections of the Codex? Might help you clean things up.
 * I’ve linked them below.
 * [https://codex.wordpress.org/FAQ_My_site_was_hacked](https://codex.wordpress.org/FAQ_My_site_was_hacked)
   
   [http://codex.wordpress.org/Hardening_WordPress](http://codex.wordpress.org/Hardening_WordPress)
 * Let me know if any information was useful or if we should dig deeper into cleaning
   the infected files for you 🙂
 *  [iscato](https://wordpress.org/support/users/iscato/)
 * (@iscato)
 * [10 years, 8 months ago](https://wordpress.org/support/topic/site-infected-with-php-script/#post-6755996)
 * Hi laurahilbun,
 * there are plenty of plugins that allow you to know where are the infected files
   on your WP site, I recommend to use Filezilla (a program to connect to your server
   via FTP) and search for those files and delete them. This is the way I used to
   clean infected WP sites before.
 * I hope I helped you 🙂

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Site infected with PHP Script’ is closed to new replies.

## Tags

 * [infection](https://wordpress.org/support/topic-tag/infection/)
 * [php](https://wordpress.org/support/topic-tag/php/)
 * [script](https://wordpress.org/support/topic-tag/script/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 2 replies
 * 3 participants
 * Last reply from: [iscato](https://wordpress.org/support/users/iscato/)
 * Last activity: [10 years, 8 months ago](https://wordpress.org/support/topic/site-infected-with-php-script/#post-6755996)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics