critara

Guess what? We had the same problem. Lost all the newsletters and database of the lists… after we upgraded to the new version. How could that happen?

The server was hacked, that is sure, and we had plenty of files injected with strange code at the top.
However, getting rid of All in One WP SF has proved impossible, in any of the ways I found mentioned in your FAQ and on these threads. We tried them all, ftp, mysql, htaccess. All of them.
We are obviously one of the worst cases out there.
Eventually we dumped the database and files and uploaded a fresh version of everthing.
I don’t think I will give it a second try, I am afraid, as we cannot afford it to go so wrong again.
Thank you anyways for replying to my questions.

OK, thank you for your reply.
This obviously changes things quite a lot.
Will see what’s going on.

Cristina

OK, We followed to the letter all your instructions and went even beyond (by necessity).

We:

– changed the name of the plugin folder

– uploaded the original htaccess file and the wp-config + wp-settings + index (home) files

– upoloaded from our backup a whole bunch of clean php files for all the plugins in which your software injected its code at the top of all their php pages.

– accessed the database and activated all the plugins that had previously vanished (With the exclusion of all-in-one-wp-security, of course).

– went back to the wordpress backend from wp-admin (which was then accessible) and started manually activating all the plugins.

and…. now I get yet again a totally white page. Not a line of html in it. PLUS I cannot acces wp-admin aylonger.

PLEASE, tell us what is happening and how we can fix our website.

We did try deactivating the plugin via FTP, but all we got is a blank page.
We are able to enter WP admin area via the ‘old’ wp-admin page (which is now the only accessible page), but when you enter the plugin tab, there is NO plugin installed, apparently and even the theme has gone.

Is this normal?

We only changed the name of the specific plugin folder, i.e. the all-in-one-wp-security plugin folder.

Unfortunately for reasons I am investigating, I am unable to enter the database, however. Hopefully that will restore things as before.

One question: which files does this plugin modify, apart from wp-config, wp-settings, and the root index page? We found modified index pages in the subfolder wp-content, plugins and themes. They had some php code in the very first line (which is counted as only one line in the bug log)

We also found some new files in the root: login.php, options.php and an enormous php-cgi.php…

Finally, when trying to download those files, my antivirus software recognized them as carrying a troyan…

Thank you for any insight you can give me on these issues.

Cristina

No, mrbsolution, I have opened my own thread now. I have tried many ways, but to no avail.

Yes, mbrsolution, and it is still a problem to me.
I have just opened another thread about this issue.

Will try, thank you!

I am having the same problem. Except that by refreshing the page, the page is still not found.

How can I solve this and get back in my website?

Thank you for a prompt response

Hallo, I am having the same problem, but I am blocked out of my website now.
How do I get back in? And be able to successfully rename the login page?

Thank you for your help!

Cristina