Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)
  • Forum: Fixing WordPress
    In reply to: Encoded Backdoor
    Thread Starter chuck018

    (@chuck018)

    It’s a theme that is no longer available so I’m going to have to just keep trying various themes until it displays correctly.

    At least I’m back online even if it doesn’t display 100% the way I want it to.

    Thank you again for all your help, you’re amazing to say the least.

    Forum: Fixing WordPress
    In reply to: Encoded Backdoor
    Thread Starter chuck018

    (@chuck018)

    I disabled all the plugins and activated 2022 Theme. Enabled all plugins one at a time and it was still good.

    When I reactivated the NEVIA plugin, it broke the site again.

    Should I follow your directions about downloading tne NEVIA as a .zip and deleting/uploading?

    Forum: Fixing WordPress
    In reply to: Encoded Backdoor
    Thread Starter chuck018

    (@chuck018)

    Ok, I deleted it but still have the same message when trying to access the site.

    There has been a critical error on this website.

    I’ll try your other suggestions with the guide. Thank you again.

    Forum: Fixing WordPress
    In reply to: Encoded Backdoor
    Thread Starter chuck018

    (@chuck018)

    Hi Steven,

    A quick comment, the Agriculture theme is no longer available to download and also, the Agriculture theme is not the activated theme the site is using.

    I’m not sure that makes any difference…?

    Forum: Fixing WordPress
    In reply to: Encoded Backdoor
    Thread Starter chuck018

    (@chuck018)

    Hi Steven, I was in the Wordfence Dashboard and I saw this message: 6 issues found in most recent scan

    So I clicked it and on the next page this is what was shown:

    Filename: /home2/lynnhall/public_html/wp-content/themes/agriculture/functions.php
    File Type: Not a core, theme, or plugin file from wordpress.org.
    Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: <?php function zBa($dewwpZ){$dewwpZ=gzinflate(base64_decode(
    
    The issue type is: Backdoor:PHP/gzinflate.encoded.8965
    Description: Encoded backdoor

    Thank you for your reply and I’ll follow what you recommended. 🙂

Viewing 5 replies - 1 through 5 (of 5 total)