Scan results: critical issue found

  • Resolved julien21

    (@julien21)


    4 years, 9 months ago

    Hello,

    I got a scan result today with a critical issue found.

    Filename: wp-content/cache/object/dbe/f6f/dbef6f1c488c528ebd852a810c9c519f.php
    File Type: Not a core, theme, or plugin file from www.ads-software.com.
    Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: wp_set_password( ‘password’, 1 )

    The issue type is: Backdoor:PHP/wpinfoajinsert.5689
    Description: Hardcoded password reset, common part of WordPress backdoors

    I deleted the file via Wordfence. Is there something else I have to do?

    Thank you.

Viewing 2 replies - 1 through 2 (of 2 total)

  • Hey @julien21,

    I’m sorry to hear that you’ve run into this.

    I’d definitely suggest updating all passwords including WordPress, sFTP, database, and hosting control panel.

    The guide below can help you clean a compromised site. However, if you’re not comfortable with this or the infection returns I’d suggest reaching out to a professional hack repair service to have the site cleaned, and the point of entry patched.

    https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/

    Thanks,

    Gerroald

    Thread Starter julien21

    (@julien21)

    Hello,

    Thank you for your answer.

    I changed all of these passwords and add the 2FA.

    I set my Wordfence scan options to “High sensitivity” and performed a new scan: no issue found.

    But I also have to run the command from the part “A few useful tools” right?

    Thank you.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Scan results: critical issue found’ is closed to new replies.