Support » Fixing WordPress » weird files not distributed in WP core

  • Resolved arsm

    (@arsenalemusica)


    Hallo anyone, I have discovered some weird files under wp-admin folder and Wordfence detects them as not-Wordpress-core and probable hacks. Also my host says they are not system generated. Could anyone throw some light over this? thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • corrinarusso

    (@corrinarusso)

    Some sort of Malware. Yes.
    You will need to run a malware scan, and remove files, and update infected files.

    You can download individual files from the trunk here:
    https://github.com/WordPress/WordPress
    or download a zip and upload as required :
    https://en-ca.wordpress.org/download/
    or re-install WordPress :

    How to install WordPress

    Malcare is a good scanner:
    https://www.malcare.com/
    Not sure about WordFence.

    Thread Starter arsm

    (@arsenalemusica)

    I never did a wordpress reintall. Shall I do it from the update backend page?

    corrinarusso

    (@corrinarusso)

    Lol, forgot about that way.
    Yes! It re-installs the core files :
    https://kinsta.com/blog/reinstall-wordpress/#dashboard

    However, I doubt it removes files on your server that should not be there.
    Scan for malware first.
    Remove the obvious files.
    reInstall WordPress.
    Scan again.

    Thread Starter arsm

    (@arsenalemusica)

    Yep, I tested and it didn’t delete the files. I deleted them using Wordfence. I really hope they were not generated by something else (I mean something created by the many servers’ “routines”)
    Thanks for the tips

    corrinarusso

    (@corrinarusso)

    > I really hope they were not generated by something else

    In my experience, these files are almost always generated from an action function that has been inserted in your files.

    Have a visual run through your sitemap.xml file to see if there is anything wonky going on in your content.

    Thread Starter arsm

    (@arsenalemusica)

    šŸ™‚ thanks for this new tip. Since my sitemap was empty, I’m now creating a new one

Viewing 6 replies - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.