Help with wordpress hack/malware

4 replies
  • WEB DESIGN
  • |
i'm on a shared hosting with host gator 4 websites 2 html only and 1 html and then i have a wp blog and another all wp a week or so ago someone somehow got a script in and it infected all my sites would remove index.htmp and replace it with index.php in all sites even the static html sites. anyway thought i had it all cleaned upped and the issue i have now is even after i thought i had it all cleaned upped in the middile of my about page on my all wp site i have porn showing up and have no idea where to look in wp to remove the code

www.natures-salves.com/about/

any and all help would most be appriciated.

i had that gone and then it reappered only on that page and i did get sitelock with there trust suppose to be a ftp blocker or something and also have found out about fence guard but neither pick this up.


thanks
#hack or malware #wordpress
  • Profile picture of the author healthproblog
    [DELETED]
    {{ DiscussionBoard.errors[10914089].message }}
    • Profile picture of the author freetriffac
      Originally Posted by healthproblog View Post

      There are many WordPress plugins are there which are very useful to prevent WordPress hacking. Here are some you can use :
      • WordFence plugin
      • Sucuri Security - Auditing, Malware Scanner and Security Hardening
      • All In One WP Security & Firewall
      • Anti-Malware Security and Brute-Force Firewall
      • WordPress Antivirus
      You should find a service like this to solve your hacked Wordpress sites or got malware/virus
      24/7 Server Management Service
      {{ DiscussionBoard.errors[10953349].message }}
  • Profile picture of the author katefeesh
    healthproblog's suggestions can only help after you've cleaned out your site.. but your about page seems fine now though. Could you share what the issue was if you've figured it out? Is sitelock's trust shield still inaccurate?
    {{ DiscussionBoard.errors[10944714].message }}
  • First of all, find a hosting that offers malware protection. Your current host doesn't. This should solve future issues and help clean your site.

    After you migrate, make sure to update all scripts to the latest version and then ask your host for a malware scan from their end. Providers typically has more tools to scan with so, their scan should be able to detect any remaining malware on your account.
    Signature
    [ Pure SSD ][ Shared, Reseller, Dedicated Server Hosting ] - [ MECHANICWEB.COM ]
    [ LiteSpeed | CloudLinux | MariaDB | cPanel | Malware Scan | Softaculous | SpamExperts ]
    {{ DiscussionBoard.errors[10956598].message }}
    • Profile picture of the author katefeesh
      Originally Posted by MechanicWeb+shoss View Post

      First of all, find a hosting that offers malware protection. Your current host doesn't. This should solve future issues and help clean your site.

      After you migrate, make sure to update all scripts to the latest version and then ask your host for a malware scan from their end. Providers typically has more tools to scan with so, their scan should be able to detect any remaining malware on your account.
      Find hosting that provides protection, or engage malware protection yourself. Whichever hosts you choose to go with that doens't offer a WAF add-on, get WAF for your site separately. Blocks out attacks from the most common to the hardest to detect. Don't trust yourself or your site lock trust shield to catch intrusions
      {{ DiscussionBoard.errors[10956768].message }}

Trending Topics