Good morning
Hello everybody
I have received the following message from my hoster:
The following files contain unique malicious code:
The page is hacked again and again
Plugin was always hacked before.
Now runs completely without plugin
Now the Enfold theme has been hacked
What can I do here?
Restored a backup before hacking on another domain
can I do something to stop the site from being hacked?
Thank you and best regards
Franz
Message from Hoster:
The following files contain unique malicious code:
-rw-r–r– 1 abogabali psacln 218 May 6 19:57 /home/httpd/vhosts/gabathuler.li/httpdocs/wp-content/themes/enfold/config-layerslider/LayerSlider/static/codemirror/addon/hint/index.php
____________________________________________________________________________
Hi Franz,
If that is the only affected file then you can try to overwrite it via FTP using the same file from a fresh copy of the theme. To prevent further security breaches then I would advice that you change ALL passwords on the site.
Best regards,
Rikard
Many thanks Rikard
I’ve tried all that.
Passwords changed X times.
someone must have specifically targeted this site
all plugins were infected before
one by one
now i have removed these plugins and then they went on the theme
will try to shut down the site for a few weeks.
you can close this request
or you have another idea.
thanks and regards Franz
Hi,
We will wait for you to bring the site back-up. When you do please begin another thread. At this moment we wouldn’t be able to do much to clean all the files. Should you need additional help with anything else, please don’t hesitate to let us know here in the forums.
Best regards,
Jordan Shannon