Title: happyelf's Replies | WordPress.org

---

# happyelf

  [  ](https://wordpress.org/support/users/happyelf/)

 *   [Profile](https://wordpress.org/support/users/happyelf/)
 *   [Topics Started](https://wordpress.org/support/users/happyelf/topics/)
 *   [Replies Created](https://wordpress.org/support/users/happyelf/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/happyelf/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/happyelf/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/happyelf/engagements/)
 *   [Favorites](https://wordpress.org/support/users/happyelf/favorites/)

 Search replies:

## Forum Replies Created

Viewing 1 replies (of 1 total)

 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[Anti-Malware Security and Brute-Force Firewall] DB Injection appears again and again…](https://wordpress.org/support/topic/db-injection-appears-again-and-again/)
 *  [happyelf](https://wordpress.org/support/users/happyelf/)
 * (@happyelf)
 * [6 years, 1 month ago](https://wordpress.org/support/topic/db-injection-appears-again-and-again/page/3/#post-13017125)
 * There seems to be a solution here:
    [https://bitofwp.com/security/how-to-trace-and-clean-the-monit-php-hack/](https://bitofwp.com/security/how-to-trace-and-clean-the-monit-php-hack/)
 * Apart from cleaning all of your WordPress site files from the malware redirect
   hack and deleting the monit.php file under the plugins directory, you will also
   need to access your database using phpMyAdmin, then browse to your wp_options
   database table and search for the following option_name records:
 * default_mont_options
    ad_code hide_admin hide_logged_in display_ad search_engines
   auto_update ip_admin cookies_admin logged_admin log_install Finally, if you find
   any of those records present delete them but first make sure you have created
   a backup for your WordPress site first(both the site files and its MySQL Database).
 * The last step is to remove the admins_ip.txt file found in the plugins directory
   as well.

Viewing 1 replies (of 1 total)