• Resolved Steve Keller

    (@stevekeller)


    I was alerted by Google that the site, a client’s, had been hacked, and using the Bluehost C-panel File Manager, I found two lines of code that are noted as the culprits. I signed up for the free Wordfence plugin, scanned, deleted a bunch of old files, rescanned, and the site seems free of malware, except… The File Manager still shows that these two lines of code are present.

    /home2/fourcen1/public_html/wp-includes/config.php: SL-PHP-INJECTOR-1-md5-abxi.UNOFFICIAL FOUND
    /home2/fourcen1/public_html/wp-content/themes/colinear-child/inc.php: SL-PHP-SHELL-md5-cguu.UNOFFICIAL FOUND

    Did Wordfence neutralize the malware, or what steps can I take to remove?

    Thanks,
    Steve

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hi @stevekeller,

    Please make sure that all scan options are selected and follow our site cleaning guide.

    Thread Starter Steve Keller

    (@stevekeller)

    Thanks Wfyann! In the process, and there are four files that I am being alerted to…
    Modified plugin file: wp-content/plugins/child-theme-configurator/readme.txt
    Type: File
    Issue Found January 28, 2018 4:11 pm
    Warning

    Modified plugin file: wp-content/plugins/ws-google-webmaster-tools/readme.txt
    Type: File
    Issue Found January 28, 2018 4:11 pm
    Warning

    Modified theme file: wp-content/themes/colinear/style.css
    Type: File
    Issue Found January 28, 2018 4:11 pm
    Warning

    Modified theme file: wp-content/themes/twentyseventeen/front-page.php
    Type: File
    Issue Found January 28, 2018 4:11 pm
    Warning

    The scan is still running, and nothing new has come up in almost 20 mins.

    Will report if I have further problems…

    Thanks,
    Steve Keller

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘How to remove malware using Wordfence?’ is closed to new replies.