qmagnets

If this moderator is right, it’s a false positive…
https://www.ads-software.com/support/topic/antivirus-plugin-detects-a-warning-require_once-locale_file

It still doesn’t help me to save the backup to my HDD.

This is my exact problem…
https://www.ads-software.com/support/topic/plugin-antivirus-how-can-i-get-back-to-this

Thanks Ronito,
worked a treat. The new update must have copied over my customised header.jpg with the plain black one.
I wonder if they could figure out a way not to do that in future?
Thanks, James

Had the same problem. Mine also redirect to blueseek.com as well as China TV.

Have a look at this post…
https://forums.digitalpoint.com/showthread.php?t=1682821

I simply changed my theme and the redirect problem was gone. I think the trojan (or what ever it is) might exploit a vulnerability in the themes.

Does anyone know what to look for in the code of the files in the themes? Could it be a simple matter of locating the code and deleting it?

I hope people take the time to read all the way down to the bottom as it will save them a lot of time.
I just replaced the vars.php file as well and it’s all good.
Thanks to those who contributed and paved the way to a simple fix!
Now does anyone know WHY it happens, or do we care?

It appears my themes folder was corrupted. When I looked at the themes in the dashboard there was no custom information or choices. I have re-uploaded the themes folder and while I need to now go back and redo my themes at least my site on now back up.

Looking back, it’s obvious now to have looked at the themes! Hindsight is a wonderful thing.

Thank you.

Well after quite a bit of searching I found a good post that described the structure of wordpress and the files to NOT overwrite.

I since did what Esmi suggested and overwrote the root directory files and then the wp-includes folder, but I’m afraid I have exactly the same problem.

I can see all my posts in my dashboard but the https://www.qmagnets.com/blog site is completely blank, not a jot or title.

Can someone please offer any further advice?

Thank you.

Thank you Esmi,
I can see all my posts in my dashboard (but not in my blog) and have now backed up my blog. I will do as you say, but I am a little hesitant to start overwriting files that might be required. Have been searching to identify such files with little success.

Are you saying that within the wp-includes folder and the files in the root directory, that wp-config.php is the only file I need to be careful not to overwrite?

Thank you. James