Even if such viruses have just damaged your site, the security weakness that caused your site and the virus may already be infected. Are you sure your backup is clean?
If the hosting provider accepts, ask imunifyav to scan your site. It gives more successful results than maldet and similar antiviruses using Imunify clamav engine. The free version will show you harmful content even if it doesn’t auto-clean.
Malicious code or content is often found in the function file or database of the theme, some viruses may have encrypted this file, if possible replace the wordpress content management system, your theme and plugins with their original files.
Check it via “fetch like google” through the Google search console, then browse with imunify and sucuri.
If the problem goes away or continues I will be following the matter.
]]>if possible replace the wordpress content management system, your theme and plugins with their original files.
This I have already done it. I have deleted all the plugins, I have deleted the theme and started using a fresh installed twentytwenty theme (changed the theme via the database as told before) and I have also installed the wordpress enviroment once again.
Sadly, I’m on a shared hosting, and I don’t think I am going to be able to use imunify but I will try asking. I need root access via SSH to install it and they need to accept it. Thank you for your recommendation @ayzeta .
]]>Call your webhost (SiteGround?) and ask them for some help. I’m sure they’ve been through this several times before with other customers.
It’s best not to guess at how the attack happened and what it is causing the problem. It could be anything.
This article is a good read and can help you…
https://www.ads-software.com/support/article/faq-my-site-was-hacked/
Hope this helps and let us know if you need more info.
]]>Call your webhost (SiteGround?) and ask them for some help. I’m sure they’ve been through this several times before with other customers.
I have spoken with the support of my hosting provider (Siteground) and they have also made scans. Sucuri alerts that my website is infected because that’s what they can recieve when they try to analize my website, and they got redirected. Now, when I or the hosting provider’s tech experts scan the files of the website, we don’t find anything that could be infected.
They won’t help me into looking the files manually because they don’t offer that service, it’s something unrelated with the maintenance of the hosting.
I have already read that article, thank you. I have read many more aswell, I’m trying to do everything as I’m told.
It’s best not to guess at how the attack happened and what it is causing the problem. It could be anything.
It could, but I need to fix it, because the backups won’t work. Many others are having the same issue since the beginning of July, that’s why I’m asking on here aswell.
Thank you for your reply @jnashhawkins .
]]>