• Cleaning up after a site was hacked. My host, (mt), disabled a bunch of suspect files, which was nice, because that made it easy to find stuff in my uploads folder and elsewhere that wasn’t supposed to be there.

    But I see this file called overload.php just hanging out loose in my wp-content folder. Googled, but I can’t find anything about it.

    All I recognize is a preg_replace function at the beginning — the rest is all encrypted or something.

    Basically I just want to know if it’s safe to delete.

Viewing 2 replies - 1 through 2 (of 2 total)
  • I would say this file contain base eval 64 code and needs to be removed – tell host about it right away (let them find it) as it may the host env that is letting this file back in or be created. Document this.

    Thread Starter bob.passaro

    (@bobpassaro)

    Thanks. Will do.

    Also found old wp-register.php and wp-pass.php files that aren’t part of WP anymore are they? Core was up to date, but I suspect a plugin was the problem. Lots of other weird stuff — same index.php file all over the place, mixed in with uploads, etc.

    Mess. But getting there, I hope.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘What is overload.php?’ is closed to new replies.