Title: Hacker/Virus Please Help!!!! Last modified: August 19, 2016 --- # Hacker/Virus Please Help!!!! * [gareth2](https://wordpress.org/support/users/gareth2/) * (@gareth2) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/) * I’m devastated. Someone or something is messing with my website. I have upgraded it to 2.8.4 but new image files keep appearing and I’m really problems in getting the site to function properly. * What can I do? * I am absolutely devastated, tired, dejected. I just want to cry. Viewing 15 replies - 1 through 15 (of 17 total) 1 [2](https://wordpress.org/support/topic/hackervirus-please-help/page/2/?output_format=md) [→](https://wordpress.org/support/topic/hackervirus-please-help/page/2/?output_format=md) * [Roy](https://wordpress.org/support/users/gangleri/) * (@gangleri) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241895) * Start here: [http://codex.wordpress.org/FAQ_My_site_was_hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked) * Upgrading doesn’t do the trick, you have to clean up properly, see the very last link in the article that I linked to. * Thread Starter [gareth2](https://wordpress.org/support/users/gareth2/) * (@gareth2) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241896) * I’m not sure what do. * I have refreshed the files from new download. * Can I do a scan for a virus? I think I have backed up my database but Im concerned about my images. * I’m devastated and tired. * [Roy](https://wordpress.org/support/users/gangleri/) * (@gangleri) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241899) * You can patch the result, but you have to get rid off the malicious code and the “backdoor” that might be created, so please follow my suggestion and read the text that I referred to (and the links there, especially Donncha and Smackdown). * A good start is changing ALL passwords (WP, `FTP`, control panel, database and all the rest that you can think off), and check the database for users that shouldn’t be there. * Yep, there’s a painfull road ahead of you, but you have to clean up well in order to be able to proceed. Good luck. * Thread Starter [gareth2](https://wordpress.org/support/users/gareth2/) * (@gareth2) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241901) * How do I make sure everything is backed up. * Is their a more experienced service who can help me with this? * Moderator [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/) * (@ipstenu) * 🏳️‍🌈 Advisor and Activist * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241903) * You should first stop having all these different topics open. You’re going to get conflicting advice since each post has slightly different information: * [http://wordpress.org/support/topic/320184](http://wordpress.org/support/topic/320184) [http://wordpress.org/support/topic/320201](http://wordpress.org/support/topic/320201) [http://wordpress.org/support/topic/320171](http://wordpress.org/support/topic/320171) * Backup everything from your public_html folder to your computer. Delete EVERYTHING on the website, except your wp-config.php file. Yes, you will lose your plugins and themes (and permalinks). You can re-apply them later. * Re-upload, from a FRESH download from wordpress.org, the core wordpress files. * See if it’s okay with the default theme. If not, it’s probably your DB. If it is, yay. Download a FRESH copy of each plugin and theme, one at a time, and keep testing. * If your DB is corrupted … we’ll come back to that. * [Roy](https://wordpress.org/support/users/gangleri/) * (@gangleri) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241905) * [edited] * Thread Starter [gareth2](https://wordpress.org/support/users/gareth2/) * (@gareth2) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241906) * How can I be sure I have backed up everything? * I have copied my images and my database. I cant afford to lose anything. * There must be something or someone who can help? * Moderator [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/) * (@ipstenu) * 🏳️‍🌈 Advisor and Activist * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241907) * Download everything from your public_html folder. Download a copy of your database. Seriously, not rocket surgery here. * If you’re still not sure HOW to do a backup, there are [a million and a half tutorials](http://www.google.com/search?q=how+to+backup+wordpress). This is something every self-hosted WordPress admin needs to get comfortable with, and FAST, because it’s your life’s blood. If the idea makes you nervous and you’re not sure you can do it, you need to get some dedicated help, asap. * This IS help, however, we’re telling you what to do, and we’re expecting you to be the webadmin and know what the basics of website running are. * Thread Starter [gareth2](https://wordpress.org/support/users/gareth2/) * (@gareth2) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241908) * okay calm down, I’m trying my best. * I’m wrecked. * Thread Starter [gareth2](https://wordpress.org/support/users/gareth2/) * (@gareth2) * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241911) * Now the FTp wont delete the files. * Moderator [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/) * (@ipstenu) * 🏳️‍🌈 Advisor and Activist * [16 years, 8 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1241931) * What are the file permissions and owners? * [wpsquadster](https://wordpress.org/support/users/wpsquadster/) * (@wpsquadster) * [16 years, 5 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1242278) * Never show that your website is done with WP because it’s an invitation to hackers. Never use the only available WP antivirus plugin because it’s bad. Most smaller software companies that provide various malware cleaners or antivirus downloads are sophisticated hackers. Read extensively and you’ll find out how and why. * [johnnyunderscore](https://wordpress.org/support/users/johnnyunderscore/) * (@johnnyunderscore) * [16 years, 4 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1242288) * A question about this. Ipstenu – your advice seems very reasonable, as does similar advice I’ve seen in other forum posts. * My question, though, is this – if, when I back up my wordpress blog, do i not also back up the infected file by default? Am I at risk of having the same problem when i re-create all the pages? * [mrhaynes](https://wordpress.org/support/users/mrhaynes/) * (@mrhaynes) * [16 years, 4 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1242289) * Can I chime in and say I am having the iframe injection hack going on. Please check modern-marriage.com. * I ran the exploit scanner and it reported the the string is located /home/content/ m/o/d/modernmarriage/html but I can’t find that location. * Any help would be appreciated. * I also noticed that when I switched to the default theme it went away. * [nemci7v](https://wordpress.org/support/users/nemci7v/) * (@nemci7v) * [16 years, 4 months ago](https://wordpress.org/support/topic/hackervirus-please-help/#post-1242290) * do you have a link to your site? Viewing 15 replies - 1 through 15 (of 17 total) 1 [2](https://wordpress.org/support/topic/hackervirus-please-help/page/2/?output_format=md) [→](https://wordpress.org/support/topic/hackervirus-please-help/page/2/?output_format=md) The topic ‘Hacker/Virus Please Help!!!!’ is closed to new replies. * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) * 17 replies * 7 participants * Last reply from: [johnnyunderscore](https://wordpress.org/support/users/johnnyunderscore/) * Last activity: [16 years, 4 months ago](https://wordpress.org/support/topic/hackervirus-please-help/page/2/#post-1242292) * Status: not resolved ## Topics ### Topics with no replies ### Non-support topics ### Resolved topics ### Unresolved topics ### All topics