Need help to clean malware from cache


#1

Hi,

I had my Wordpress “hacked”, and after cleaning the main files, I check with Webpagetest to see what is loading, and I get these “malware”


///////////////////////
URL: https://cdn.allyouwant.online/main.js?t=lrp1
Loaded By: https://ajax.cloudflare.com/cdn-cgi/scripts/2448a7bd/cloudflare-static/rocket-loader.min.js:0
Host: cdn.allyouwant.online

///////////////////////
URL: https://cdn.allyouwant.online/main.js?t=c
Loaded By: https://www.todoperros.com/wp-content/cache/busting/1/wp-includes/js/jquery/jquery-1.12.4.js:0
Host: cdn.allyouwant.online
///////////////////////

URL: https://counter.yadro.ru/hit;horselorse5151?t44.6;r;s1920120024;uhttps%3A//www.todoperros.com/;hTodo%20Perros;0.9400098896018136
Host: counter.yadro.ru
///////////////////////

I have purgued Cloudflare cache, WPRocket cache and OPCache, and nothing.

Could anyone guide me about how to delete all these files?


#2

You can turn off rocket loader to see what script is calling those resources, but they appear to still be loaded by files in your instance such as https://www.todoperros.com/wp-content/cache/busting/1/wp-includes/js/jquery/jquery-1.12.4.js:0 in the second error screenshot.


#3

Hi, i write a post, maybe you can be interested:
https://blog.dismal.site/problemas-en-wordpress-con-utroro-com-y-horselorse5151/


#4

Well, I reckon I have cleaned up all the files.

I installed this plugin “Wordfence Security – Firewall & Malware Scan” to identify all infected files, and updated one plugin that wasn’t updated.

Thanks!


#5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.