Support » Plugin: Wordfence Security - Firewall & Malware Scan » Site is BLANK after deleting a suspicious file

  • Resolved mjaraas27

    (@mjaraas27)


    After deleting a suspicious file found during a scan (wasn’t part of a core or theme file) the site dashboard is completely blank. The site itself is showing up and working but I can’t access the dashboard. No error, just blank. I have tried deleting the plugin, re-uploading it, messing with my .htaccess file (although I don’t know what I’m doing there! and restored it to the previous state). Not sure what else to try and very frustrated.

Viewing 3 replies - 1 through 3 (of 3 total)
  • What file did you delete?

    Plugin Author WFMattR

    (@wfmattr)

    Hi,

    In rare cases, attackers may add code to wp-config.php to load their malicious files — do you see any unusual “require” or “require_once” lines in that file? Normally, there should only be one at the end, but some plugins might add some too. (Keep a backup first, if you try modifying it.)

    Also, as long as your host hasn’t disabled error logs, there should be an error log file that shows which file is missing, and which file is trying to load it. If you’re not sure where to find your error logs, your host should be able to help you find them — or they can enable them if they’re off by default.

    Do you know if it might have been part of a plugin? If it was in a plugin’s folder, you could try temporarily disabling that plugin (or each plugin you have, if you’re not sure which). Since you can’t access wp-admin, you would have to use FTP/SFTP or your host’s file manager to rename the folders in the “wp-content/plugins/” directory. (For example, to disable “akismet”, you could rename it “akismet-disabled”, and WordPress would automatically skip loading it.)

    -Matt R

    Thank you so much Matt!! You really saved my bacon! I am new to this so wasn’t even aware there was an error log – once I opened that and looked at what file it was trying to find, I replaced it and was good to go. I had previously tried deactivating the plugins to no avail. I really appreciate your response and help as I try to learn all of this!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Site is BLANK after deleting a suspicious file’ is closed to new replies.