Update:
The following files found being re-injected to the site (wordfence plugin)?.
However, these found with daemon owner, I had to change the owner and delete them. But, still found being re-injected.
directory:
wp-content/wflogs/
screenshot of the files found:
https://ibb.co/kD9WbMp
-
This reply was modified 6 years ago by tozaorg.
-
This reply was modified 6 years ago by tozaorg.
Greetings, I am afraid I have to re-open this again.
So, I have the same monit malware issue. I’ve deleted the theme and all related plugin + downloaded latest definition updates.
However, it seams the script is re-injection it self, even after Anti-Malware deletes it.
It seems to be bigger than what we think it is.
Screenshot:
https://ibb.co/wY0Sd57
