is my timely plugin hacked?

  • Resolved deepmill

    (@deepmill)


    7 years, 2 months ago

    I have install the all-in-one event calendar. all works great.
    when I look at the folders using FTP. there is a new folder in the root called _E39QN~5
    with 14 sub folders each with anothe folder leading to a single php file with a very long name sauch as:
    bacc16e82305cef35f2d4954e3a58cf88f86b74ba3bdfdb3edd107c03a6d.php
    when I look in the php file everyone references
    the timely theme i.e:
    timely ai1ec-calendar-toolbar ai1ec-clearfix
    the conmment atthe top of the files are:

    /* filter-menu.twig */ or /* navigation.twig */

    If I delete all the folders they reappear.

    Wordfence suggested something odd file in the cache folder of All-in-one which I deleted and reset the styles.

    is this folder a problem?

    • This topic was modified 7 years, 2 months ago by deepmill.
    • This topic was modified 7 years, 2 months ago by deepmill.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)

  • @deepmill

    I can’t tell what is going on but I recommend the following:

    Disable all other plugins in your wordpress dashboard.

    Perform a manual re-install of the Core calendar:

    – Perform a complete back up of your database before proceeding further
    – Delete the file uninstall.php from the plugin directory that is currently on the server (found under /wp-content/plugins/all-in-one-event-calendar). Deleting this file ensures that when you uninstall the current version of the plugin, your event data and calendar settings will be preserved when you delete the plugin (don’t skip this step – it’s important!)
    – Deactivate the All-in-One Event Calendar using your WordPress Dashboard.
    – Delete the All-in-One Event Calendar using your WordPress Dashboard.
    – Database -> wp_options, click option_name to sort and delete everything with ai1ec_, this will delete plugin settings but events will remain in the database.
    – Now install the latest version.

    Afer all is confirmed working, re-activate your other plugins one by one and confirm that the original problem has not returned.

Viewing 1 replies (of 1 total)
  • The topic ‘is my timely plugin hacked?’ is closed to new replies.