wordpress Virus/Troyan $O0O_0O_O_0

jlucho

Well-Known Member
Aug 5, 2006
126
1
168
dear


I have a problem with wordpress, there is a virus or Trojan intrusion, or script that is violating a website



I have deleted that strange code, but it automatically reappears, and this is repeated immediately


I have clamav pin and maldet, inmunifyAV unwanted script has been deleted, but after a few minutes, everything gets infected again


any idea what may be the problem? How to solve it?
 
Last edited by a moderator:

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,304
363
Houston
Typically this is caused by a compromised theme, plugin etc. in your Wordpress installation. You should remove any unused items from your Wordpress installation then run the scan again to determine if it comes back. If so you'd need to fully audit every file in the Wordpress installation to identify the source. Until the source is removed it will continue to reinfect the installation.
 

jlucho

Well-Known Member
Aug 5, 2006
126
1
168
I manually delete the index.php file, and it appears immediately, with malicious code


Do you have any idea how to solve this problem?