YUCATAN.DANCE
Active member
already did. they provided the scan log and i cleaned up manually. fortunately those files are not much!
My Site's been hacked!
- Thread starter YUCATAN.DANCE
- Start date
-
Welcome to Original Babiato! All Resource are Free and No downloading Limit.. Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here! Support Our Work By Donating Click here!
orbitsolutions
Active member
- May 5, 2022
- 213
- 68
- 28
replace everything! themes , plugins etc.. scan site online
- Oct 16, 2019
- 373
- 189
- 43
Give a list of Themes & Plugins you have used just so that people can be wary off & do additional checks
Indeed.. Need to report every time we see to have resource/user removed..
YUCATAN.DANCE
Active member
ok, here is the scan log...
before scanning i removed bunch of plugins, so these are not included in the logs.
Backdoor Scan-log - Pastebin link
before scanning i removed bunch of plugins, so these are not included in the logs.
Backdoor Scan-log - Pastebin link
- Oct 16, 2019
- 373
- 189
- 43
That's not a virus, that's the whole plague itselfok, here is the scan log...
before scanning i removed bunch of plugins, so these are not included in the logs.
Backdoor Scan-log - Pastebin link
That's a nasty infection!
- Apr 19, 2020
- 122
- 374
- 63
You shouldn't use nulled plugins on production websites, even more so when clients are involved. They're great for testing on staging sites to see if they do what you need - you then purchase a licence. Unfortunately, the only thing that cost you revenue is cheaping out by not purchasing a licence.
- Oct 16, 2019
- 373
- 189
- 43
@YUCATAN.DANCE on production if you have a tight budget & it's a personal site, grab some legit activations from the trusted sellers here & for other plugins, like the backup ones and stuff, either do it manually yourself or use the free version. Wherever a free version + manual work can do the trick, do that. It'll save you from these headaches & give your site better performance (by reducing number of pplugin)
YUCATAN.DANCE
Active member
Custom B
Active member
- Feb 29, 2020
- 137
- 123
- 43
jeeez that must have been some crawling speed site...the wwwalking deadok, here is the scan log...
before scanning i removed bunch of plugins, so these are not included in the logs.
Backdoor Scan-log - Pastebin link
We make an effort to abide by the standards that have been set up in our community about new users contributing resources in threads. The best advise is to report any questionable comments made by new members because we moderators monitor an average of about 190,000 people, making it challenging to keep track of everything. If necessary, we'll evaluate the comments and take appropriate action. best recommendation at the moment is to use the download button on the page at all times, or make sure you're downloading from a trusted user who has the Nullmaster badge since Babiato has approved them.
have you changed wordfence scan settings to high sensitivity to check all folder ?!
you already have a shell on your website which allows the hacker to modify files any time or he already has access to your cPanel
and my advise is to find a hosting that have
Code:
imunify 360
Last edited:
best thing to resolve issues go to https://sucuri.net/ hire services they will fix everything with small price ...
This is shell installer
1- use wordfence scan with the high sensitivity setting to scan all directories
2- change your cPanel password and check if new users has been added to the database or wordpress users.
3- check if file manager plugin has been installed on ur wordpress.
4- use a hosting provider that have
Code:
imunify 360 extention5- Always use 2FA authentication option in wordfence
6- always Disable Code Execution for Uploads directory from wordfence all options.
7- disable user registration (if your website doesn't require it).
8- disable file editing in wordpress by adding this code to wp-config.php
Code:
define( 'DISALLOW_FILE_EDIT', true );10- check the steps here
I hope this helps
Last edited:
what do you mean by "even worse"?..even worse
You think Babiato is a place people or anyone just uploads whatever they like without those files being scanned first?
I use many plugins from here and have never had this issue. Please, drop it.
sometimes your website is not the one originally hacked but another on the same server which gives the hacker the ability to access all websites on that server.
use good hosting provider and clean your files and scan your files using imunify 360 and wordfence(high sensitivity scan)
imunify will stop the execution of any malicious script and delete it
Last edited:
Custom B
Active member
- Feb 29, 2020
- 137
- 123
- 43
I have been using Babiato too but issues like is not because of the files you downloaded from Babiato. There are many ways to hack your application (WordPress mostly).
I can join hands in helping you fix it if you don't mind. I've done it for different clients before and all websites work well now.
It takes time but I sure make it work.
Had to say something cos of what you said BUT I have seen who you replied earlier. All good.dude chill..
amitkumar
Member
- Feb 11, 2019
- 41
- 23
- 18
Similar threads
