k1n7t6

all the malware files under WordPress have been removed, a bigger problem is that the database seems to be missing the primary, im lost sorry, maybe not an easy fix but something in a backup, i use a plugin called updraft, i have the backups but they may have malware, i just need it up long enough to backup my more important work, i wonder if this would work
1. install WP
add updraft plugin
import the backups and run?
i wonder if that would fix the data base and the wp network?

Yes the offending files were deleted from the WordPress folder,many index.php, would you like to see a list of the clam scan.log they sent me. Most are experimental sites on a subfolder, i have a backup of the data bas and a backup of the WordPress folder.
There are over 133 manual deletions required.

/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/w6hiwjvs3x_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/uploads/sites/4/elementor/tmp/5d59ca59e89cc/consulting-child/functions.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/bb-plugin/classes/class-fl-builder-service-enormail.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/bb-plugin/js/gikxfume.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/fonts/.ce75e400.ico
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/updraftplus/addons/reporting.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/updraftplus/languages/grotuxwe.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/porto-content-types/languages/ocmzltkb.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/plugins/prime-mover/compatibility/PrimeMoverElementorCompat.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/consulting-child/functions.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/flip/engine/theme-options.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/zakra/template-parts/content-page.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/Nexus/js/custom.js
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/omega/page.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/themes/eggnews/template-parts/njgwdhuu.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/twentysixteen/single.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/lakshmi-lite/single.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/flip/engine/theme-options.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/themes-old/consulting-child/functions.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-10-30-2235_k1n_7t6_350012cc4324-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-09-09-0008_k1n_7t6_03681a8bb477-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-10-29-2152_k1n_7t6_e440a9a5f941-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-content/updraft/backup_2020-12-09-2238_k1n_7t6_199c7e15faf9-wpcore.zip
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/0.gravatar.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/apis.google.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/app.canada.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ads.pubmatic.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ads.mocean.mobi/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.ottawasun.com_2014_03_17_condo-fraudster-son-off-to-jail/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/assets.pinterest.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/c.jsrdn.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/c.amazon-adsystem.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/connect.facebook.net/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/distroscale.s3.amazonaws.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/enewsletter.postmedia.com/dist/.71a1ffc9.ico
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/fancy.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/flyers.ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/gmpg.org/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/help.weheartit.com/customer/y8cspe7pvt_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/help.weheartit.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/i.jsrdn.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/img.t.sinajs.cn/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/js-sec.indexww.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pentos-cdn.polarmobile.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pixel.quantserve.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/pixel.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/platform.foursquare.com/index.php

/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/platform.twitter.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s.ytimg.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s0.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s1.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s2.wp.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/schema.org/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/s7.addthis.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/st.hzcdn.com/pess1c6ao5_index.php

/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/st.hzcdn.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/static.chartbeat.com/index.php

/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/stats.wp.com/index.php

/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/storage.ottawasun.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/swenzhang.baidu.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/tags.bluekai.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/tjs.sjs.sinajs.cn/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/weheartit.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.addthis.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.canada.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/widgets.outbrain.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.distroscale.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.google-analytics.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.googletagservices.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.googletagmanager.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.houzz.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.smartadserver.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.w3.org/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/www.youtube.com/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/Sun Newspaper/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/SimplePie/Net/ttouxvlz.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/blocks/html/vjqdnupd.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/wp-includes/sodium_compat/namespaced/x7ju4u60bn_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/1/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/cloud/11/index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/bmoq35f2xh_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/tgk6biacm2_index.php
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/forum/cache/beac5c791d8caf5510828d976852a2a1
/home/users/web/b2831/nf.k1n7t6/public_html/WordPress/forum/cache/00e5a43aa38ffda58d0e6b9d6f111faa
*******************************************************
Q2, public_html/WordPress/wp-config.php
<?php
/**
 * The base configuration for WordPress
 *
 * The wp-config.php creation script uses this file during the
 * installation. You don't have to use the web site, you can
 * copy this file to "wp-config.php" and fill in the values.
 *
 * This file contains the following configurations:
 *
 * * MySQL settings
 * * Secret keys
 * * Database table prefix
 * * ABSPATH
 *
 * @link https://wordpress.org/support/article/editing-wp-config-php/
 *
 * @package WordPress
 */

// ** MySQL settings - You can get this info from your web host ** //
/** The name of the database for WordPress */

/** MySQL database username */

/** MySQL database password */
define( 'DB_PASSWORD', '#########' );

/** MySQL hostname */

/** Database Charset to use in creating database tables. */
define( 'DB_CHARSET', 'utf8' );

/** The Database Collate type. Don't change this if in doubt. */
define( 'DB_COLLATE', '' );

/**#@+
 * Authentication Unique Keys and Salts.
 *
 * Change these to different unique phrases!
 * You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
 * You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
 *
 * @since 2.6.0
 */
define( 'AUTH_KEY',         'put your unique phrase here' );
define( 'SECURE_AUTH_KEY',  'put your unique phrase here' );
define( 'LOGGED_IN_KEY',    'put your unique phrase here' );
define( 'NONCE_KEY',        'put your unique phrase here' );
define( 'AUTH_SALT',        'put your unique phrase here' );
define( 'SECURE_AUTH_SALT', 'put your unique phrase here' );
define( 'LOGGED_IN_SALT',   'put your unique phrase here' );
define( 'NONCE_SALT',       'put your unique phrase here' );

/**#@-*/

/**
 * WordPress Database Table prefix.
 *
 * You can have multiple installations in one database if you give each
 * a unique prefix. Only numbers, letters, and underscores please!
 */
$table_prefix = 'wp_';

/**
 * For developers: WordPress debugging mode.
 *
 * Change this to true to enable the display of notices during development.
 * It is strongly recommended that plugin and theme developers use WP_DEBUG
 * in their development environments.
 *
 * For information on other constants that can be used for debugging,
 * visit the documentation.
 *
 * @link https://wordpress.org/support/article/debugging-in-wordpress/
 */
define( 'WP_DEBUG', false );
define('WP_ALLOW_MULTISITE', true);

define('MULTISITE', true);
define('SUBDOMAIN_INSTALL', false);
define('DOMAIN_CURRENT_SITE', 'k1n7t6.ca');
define('PATH_CURRENT_SITE', '/');
define('SITE_ID_CURRENT_SITE', 1);
define('BLOG_ID_CURRENT_SITE', 1);

define( 'WPPA_MULTISITE_INDIVIDUAL', true ); // Multisite WP 3.5 or later with every site its own albums and photos
define( 'WPPA_MULTISITE_BLOGSDIR', true ); // Multisite prior to WP 3.5 with every site its own albums and photos
define( 'WPPA_MULTISITE_GLOBAL', true ); // Multisite with one common set of albums and photos
/* That's all, stop editing! Happy publishing. */

/** Absolute path to the WordPress directory. */
if ( ! defined( 'ABSPATH' ) ) {
	define( 'ABSPATH', __DIR__ . '/' );
}

/** Sets up WordPress vars and included files. */
require_once ABSPATH . 'wp-settings.php';
*******************************************************************************
Q3  phpMyAdmin
all tables begin with WP
<code>wp_10_bwg_album</code>
on query it says:
MySQL returned an empty result set (i.e. zero rows). (Query took 0.0401 seconds.)

I'm looking at <code>wp_10_options</code>             (this is really strange, looks corrupted)

option_id
option_name
option_value
autoload
1
siteurl
http://k1n7t6.ca/tagottawa/briansigns
yes
2
home
http://k1n7t6.ca/tagottawa/briansigns
yes
3
blogname
BrianSigns
yes
4
blogdescription
yes
5
users_can_register
0
yes
6
admin_email

yes

• This reply was modified 5 years, 4 months ago by Yui. Reason: please use CODE button for proper formatting