Wordpress keeps reinfected
-
hello my wordpress theme keeps reinfected
i dont know were the virus is coming from, they upload archives on ftp and redirects all wordpress pages
i installed this pluggin
what is your opinion about this pluggin
my wordpress is all actualized. Any ideas to spot reinfections
-
Hmmm maybe some further reading is required. Here's potentially some helpful info for you on hardening WP, and other experiences with .htaccess hacks that might point you in a helpful direction.
http://codex.wordpress.org/Hardening_WordPress
https://www.google.com/search?q=htaccess+hack+wordpress
http://wordpress.org/support/topic/htaccess-hacked-redirects-to-russion-site
http://wordpress.org/support/topic/recurring-htaccess-hijack?replies=30
http://wordpress.org/support/topic/my-sites-htaccess-file-hacked-how
-
I have askimet instalet.
They upload files like and introduced code like database.sql.php on htaccess
-
My first thoughts: I'd install something like WP Firewall, to help you monitor any changes in files and easily maintain security on the site. It should email you any time something is changed (can be annoying but it might provide a trail for you for how the site is getting changed).
It might not provide everything you need though, as already stated.
Have you been able to identify how the site is being altered? See if you can find some of the code that is being used and then do a web search for it.
I recently found that a few of our sites had been hacked using an exploit through Akismet - yeah Akismet. It was about 30 websites that got hacked - and the only common plugin was Akismet. So if it's happening over a couple of sites (I see you have a couple) look for patterns (same host, same plugins, same ftp details) and try and isolate the issue that way.
-
Tanks Alexandru, i will do that.
My host is the one who keeps saving me from this attack.
They adviseme to unistall sucuri pluggin. And look for virus on my computer (althouth i have a Mac) i run the only virus program i could find (dont now if you can tell me another for mac
-
Hi There,
I previously dealt with 3 WordPress website that have got infected. Installing plugins like sucuri.net or http://vaultpress.com/ could be a solution but once the system is infected those won't necessary fix the problem
Here's what to do:
1. Delete all you plugin and check the theme for malware. If possible reinstall the theme with the original/updated version. See if that fixes the problem
If not:
Backup your database ( or even use a .xml export file)
Backup your pictures (make sure you only keep files with extensions like .jpg, .jpeg, .gif, .swf, .png, .bmp )Delete all your wordpress folder
Reinstall fresh version of wordpress
Reinstall fresh version of theme
Import data.xml or run database import from phpmyadmin
Upload your images.
If the problem persists, make sure your hosting environment is not the cause of the infection. Unfortunately one of my clients had a situation like those and we had to change all his hosting...
BUT: MOST LIKELY ONE OF THE PLUGINS WILL BE THE CAUSE
UNINSTALLING AND DELETING ALL PLUGINS MIGHT JUST FIX THIS ISSUE.
-
Yes please give me some referrals
-
Might be best to use someone that has specific knowledge of WordPress security to lock your site down. Plugins generally don't catch everything and certainly do not lock you down from further attacks. There are a few steps that you can take to make sure your site won't be infected through simple scripts and brute force. If you need a referral for a security guys let me know.
-
i think the plugin is not the problem thats why i am asking information about that plugin.
I have restored the web every two days wich is the time between they can enter my ftp again.
24 up 48 hours the time bettwen virus came back to wordpress and install new archives.
I have change all the passwords, no clue what is happening
-
If you can reload the site via FTP to a state prior to loading the plugin that would be the way to go...assuming the plugin is the problem.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Search Console Incorrectly Identifies WordPress Version and Recommends Update
Howdy, Moz fans, Today I received four emails from Google Search Console recommending I update WordPress. The message reads, "Google has detected that your site is currently running WordPress 3.3.1, an older version of WordPress. Outdated or unpatched software can be vulnerable to hacking and malware exploits that harm potential visitors to your site. Therefore, we suggest you update the software on your site as soon as possible." This is incorrect, however, since I've been on 4.3.1 for a while. 3.3.1 was never even installed since this site was created in September, 2015, so the initial WP Engine install was likely 4.3. What's interesting is that it doesn't list the root URL as the problem source. The email states that it found that issue on a URL that is set up via WP Engine to 301 to a different site, which doesn't use WordPress. I also have other redirects set up to different pages on the second site that aren't listed in the Search Console email. Anyone have any ideas as to what's causing this misidentification of WP versions? I am afraid that Google sees this as a vulnerability and is penalizing my site accordingly. Thanks in advance!
White Hat / Black Hat SEO | | jmorehouse0 -
I have deleted a couple of posts from my blog, im using wordpress but still showing in the search how to delete?
Hey Guys, So I deleted a couple of pages from my blog, and when I search the keyword it is still showing do you guys have any idea how I can completed delete this from the search? Here is the page http://bit.ly/1cRR4qJ
White Hat / Black Hat SEO | | edward-may0 -
WordPress Plugin Backlink?
When developing a WordPress plugin, is it OK to include a dofollow backlink with the name of the source site as the anchor text? Or would Google consider this spammy?
White Hat / Black Hat SEO | | JABacchetta0 -
Tags on WordPress Sites, Good or bad?
My main concern is about the entire tags strategy. The whole concept has really been first seen by myself on WordPress which seems to be bringing positive results to these sites and now there are even plugins that auto generate tags. Can someone detail more about the pros and cons of tags? I was under the impression that google does not want 1000's of pages auto generated just because of a simple tag keyword, and then show relevant content to that specific tag. Usually these are just like search results pages... how are tag pages beneficial? Is there something going on behind the scenes with wordpress tags that actually bring benefits to these wp blogs? Setting a custom coded tag feature on a custom site just seems to create numerous spammy pages. I understand these pages may be good from a user perspective, but what about from an SEO perspective and getting indexed and driving traffic... Indexed and driving traffic is my main concern here, so as a recap I'd like to understand the pros and cons about tags on wp vs custom coded sites, and the correct way to set these up for SEO purposes.
White Hat / Black Hat SEO | | WebServiceConsulting.com1 -
Is it worth getting links from .blogspot.com and .wordpress.com?
Our niche ecommerce site has only one thing going for it: We have numerous opportunities on a weekly basis to get reviews from "mom bloggers". We need links - our domain authority is depressing. My concern is that these "mom bloggers" tend to have blogs that end with .blogspot.com or .wordpress.com. How do I screen for "reviewers" that are worth getting links from and how can I make the most of the community we have available to us?
White Hat / Black Hat SEO | | Wilkerson1 -
Do pingbacks in Wordpress help or harm SEO? Or neither?
Hey everyone, Just wondering, do pingbacks in Wordpress help or harm SEO? Or neither?
White Hat / Black Hat SEO | | jhinchcliffe1 -
How do you keep a record of your onsite SEO changes
Hi Everyone, I'm new to the whole SEO process, so was wondering if anyone can help me. I want to keep a record of all SEO activities in one place for the website i'm trying to optimise for. I have created an excel sheet which have the follwoing tabs -Overview & Rankings
White Hat / Black Hat SEO | | mcliddy
- Keyword Research Competitior Analysis
- Keyword Distribution Map Onpage SEO Link Ideas Link Research
-Link Building Log
- PPC Campaign Does this all seem correct?
Could anyone help in telling me what process you do to keep a record of all SEO onsite activity? I hope this isn't a stupid post, but help would be very much appreciated Many Thanks Matt0