Title: kinison's Replies | WordPress.org --- # kinison [ ](https://wordpress.org/support/users/kinison/) * [Profile](https://wordpress.org/support/users/kinison/) * [Topics Started](https://wordpress.org/support/users/kinison/topics/) * [Replies Created](https://wordpress.org/support/users/kinison/replies/) * [Reviews Written](https://wordpress.org/support/users/kinison/reviews/) * [Topics Replied To](https://wordpress.org/support/users/kinison/replied-to/) * [Engagements](https://wordpress.org/support/users/kinison/engagements/) * [Favorites](https://wordpress.org/support/users/kinison/favorites/) Search replies: ## Forum Replies Created Viewing 2 replies - 1 through 2 (of 2 total) * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [3.3.1 Hacked by saveprefs.ru redirect](https://wordpress.org/support/topic/331-hacked-by-saveprefsru-redirect/) * [kinison](https://wordpress.org/support/users/kinison/) * (@kinison) * [14 years, 4 months ago](https://wordpress.org/support/topic/331-hacked-by-saveprefsru-redirect/page/7/#post-2511591) * And don’t forget to change your wordpress and FTP passwords! * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [3.3.1 Hacked by saveprefs.ru redirect](https://wordpress.org/support/topic/331-hacked-by-saveprefsru-redirect/) * [kinison](https://wordpress.org/support/users/kinison/) * (@kinison) * [14 years, 4 months ago](https://wordpress.org/support/topic/331-hacked-by-saveprefsru-redirect/page/7/#post-2511590) * I signed up here just to post my resolution. I don’t know exactly what part of this fixed my problem… but its fixed. * **Step one:** Cleared out all of my .htaccess files. make sure your file permission is set to 644. i noticed that some were changed. Many of them had redirects in them and were hidden by scrolling down and right. I made them all blank other than the one in my public_html folder. This is the code I used for the public_html. htaccess file: * # BEGIN WordPress RewriteEngine On RewriteBase / RewriteRule ^index\.php$ – [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME}!- d RewriteRule . /index.php [L] * # END WordPress * **Step two:** Changed every .htaccess file on the server from file permission 644 to file permission 444. ** Step three: found files that did not look right. these included a folder named “issue.” I deleted the entire folder. inside this folder was a .php file called honey.php. * I also found a file called “wp-zycgg” in wp-content/themes. I deleted this entirely. * I also found 2 files in the home directory called component.php and counter.php. I deleted them both. ** Step 4: I installed a plugin called wordfence and scanned the website. [http://www.wordfence.com/](http://www.wordfence.com/) Wordfence flagged a couple files and I removed them as well. * **step 5** I then updated wordpress to the same version to restore any missing or corrupt files. * After that I scanned the site here: [http://sitecheck.sucuri.net](http://sitecheck.sucuri.net) * since then I have been good. Have not had any issues since. I apologize if any of this seems confusing or useless but this is what worked for me. This was making me crazy for a coupled days. Viewing 2 replies - 1 through 2 (of 2 total)