• My site has been hacked and I got the advice to use wordfence. The attacked files did show up by wordfence and I deleted them.
    Now I can not access my wp-admin. Can any one help me.

Viewing 3 replies - 1 through 3 (of 3 total)
  • To get the best response, you should really post support requests in the plugin support forum.

    Regarding your issue, it is possible that you deleted an essential site file that had some infected code inside.

    My advise would be to restore your site from a good backup, or contact your host to see if they can help you with a restore from their backups (which they may or play not keep).

    When you get back up and running work your way through these resources:

    https://codex.www.ads-software.com/FAQ_My_site_was_hacked
    https://codex.www.ads-software.com/Hardening_WordPress

    For future reference, you should really inspect the flagged file(s) for changes from the original versions, and then try and restore the original version of files. Deletion only works for non core or plugin files, and is usually only a temporary solution unless you take steps to close the original vulnerability.

    Good luck!

    Thread Starter R Geenen

    (@ronny-geenen)

    Than you for the info. I am going to keep your files and study them.

    Meanwhile here is what I did. First I took my computer to a knowledgeable IT guy. He totally cleaned my computer. And while my computer was with him, I had the new office 2013 installed. Next I contacted the person who taught me via webinars, how to design my own web, based on www.ads-software.com. I still has 3 backups of my web that were created with 2 month intervals. My web was built on a Studiopress Theme which my teacher still has in his file. He called up the backup (of course I lost some of my articles) and moved the info to the theme he still has. He checked to be sure everything was clean and then gave me back the weblog. Of course I paid for all the above.

    The teacher has also setup the free version of wordfence in my admin area.
    Is this sufficient? What is the real difference between the “free” and the “paid”, beside that it cost me money? Does wordfence keeps my weblog clean?
    And my weblog is called https://MyIndoWorld.com

    Sounds like a sensible approach. To add to the steps you’ve taken I would also:

    • change all passwords (WordPress dashboard/cPanel/MYSQL database) for strong versions that include special characters such as: (*&^%£:@_+
    • change your salt keys in your wp-config.php file to log out all users

    Regarding the free vs premium plugin, the extra features are listed here: https://www.wordfence.com/ This would be a personal decision whether to step up to the premium, but the hardening WordPress steps I linked to above are highly recommended. Then, whether you are using the premium or free version, use those scans to keep an eye on your installation. If you have any questions about the scan results, use the “check the file against the original” feature and post any questions in the Wordfence support forum (much better than here for support).

    Finally, a good backup plugin is a great idea so that you can take daily or weekly site/database backups to store remotely on your computer.

    Well done for the logical steps taken so far, and good luck going forward ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Lost’ is closed to new replies.