Sucuri warning (serious?)

  • rozo85

    (@rozo85)


    6 jaren, 6 maanden geleden

    Hi there
    Sucuri is warning me that some core files haven been changed. I don’t know how serious this is. I see that the following files have been changes:

    1.74K 09/10/2018 05:07 wp-includes/IXR/rwkumokl.php
    1.67K 09/10/2018 05:07 wp-includes/js/imgareaselect/wkzmrjqt.php
    15.86K 08/10/2018 12:15 wp-admin/includes/ms-deprecated.php
    14.26K 08/10/2018 12:13 wp-includes/Requests/Exception/HTTP/503.php
    14.37K 08/10/2018 12:09 wp-includes/customize/class-wp-customize-background-image-control.php

    Is this normal

    WKR Rolf

2 reacties aan het bekijken - 1 tot 2 (van in totaal 2)
  • Marcorutgers.nl

    (@marcorutgersnl)

    6 jaren, 6 maanden geleden

    Hi, the first two files may be malicious files, i’m just looking at the filename being random characters. You can trust sucuri.net so the other files probably are malicious as well.

    a.s.a.p. install the plugin WordFence and spend a few minutes to configure it. Then start a FULL scan. WordFence will tell you if these files are malicious. And WordFence will help you repair or delete them.

    let us know the result, and if you need more help.

    Marco

    Thread starter rozo85

    (@rozo85)

    6 jaren, 6 maanden geleden

    Hello Marco
    Thnx for your advice. Wordfence did’nt find very much. Did’nt even notice the changed and illegal files! Sucuri is better i think.

    Anyway my hoster advised me to:
    1 delete the above named files
    2 to clean all wordpress dirs bij replacing them from a downloades install file (without wpconfig.php)
    3 to clean all plugins by deleting them and replace the content bij the original install files.

    Furthermore i replaced all imnportant passwords.

    Grtz Rolf

2 reacties aan het bekijken - 1 tot 2 (van in totaal 2)
  • Het onderwerp ‘Sucuri warning (serious?)’ is gesloten voor nieuwe reacties.