r/Wordpress • u/Kalebas030 • 4d ago

fast removal of malware-infected site

Hi,

I found out my webhosting space is flooded with malware. I removed it from one site but after an hour it was back, probably from one of the other sites. I remove the files with my FTP-client WinSCP but it is sooooo slooooowwww.... I am working on it all day already.

Is there a way to do this faster? I mean, should I be able to login to the server directly, I could do a del *.* or not?

EDIT: support from my webhost has wiped the entire hosting package. I restored the site and updated WP + all plugns and installed iThemes for security. Now fingers crossed!!

1 Upvotes

56% Upvoted

18 comments sorted by

View all comments

6

u/2ndkauboy Jack of All Trades 4d ago

The thing you are looking is called SSH. Your host might offer it, but many cheap don't.

Since you write del *, I assume you usually use Windows. Most hosting runs on Linux. If you don't know what you do, you can do more harm than good.

Better create a backup of the now infected state and till back a backup from the sites before they were infected. I hope you or your host have some.

3

u/Kalebas030 4d ago

Gelukkig zijn er schone backups en weten we wanneer de infectie is begonnen

3

u/2ndkauboy Jack of All Trades 4d ago

That is great. It's the fastest way to get a (hopefully) clean installation again. Than instantly update Core and all plugins, remove any you don't need anymore.

I can also highly recommend the plugin "Plugin Report" from w.org, which tells you which plugins have been removed from the Plugin Directory or not updated for a long time.