Need help to clean malware from cache

Hi,

I had my Wordpress “hacked”, and after cleaning the main files, I check with Webpagetest to see what is loading, and I get these “malware”


///////////////////////
URL: https://cdn.allyouwant.online/main.js?t=lrp1
Loaded By: https://ajax.Cloudflare.com/cdn-cgi/scripts/2448a7bd/Cloudflare-static/rocket-loader.min.js:0
Host: cdn.allyouwant.online

///////////////////////
URL: https://cdn.allyouwant.online/main.js?t=c
Loaded By: https://www.todoperros.com/wp-content/cache/busting/1/wp-includes/js/jquery/jquery-1.12.4.js:0
Host: cdn.allyouwant.online
///////////////////////

URL: https://counter.yadro.ru/hit;horselorse5151?t44.6;r;s1920*1200*24;uhttps%3A//www.todoperros.com/;hTodo%20Perros;0.9400098896018136
Host: counter.yadro.ru
///////////////////////

I have purgued Cloudflare cache, WPRocket cache and OPCache, and nothing.

Could anyone guide me about how to delete all these files?

You can turn off rocket loader to see what script is calling those resources, but they appear to still be loaded by files in your instance such as https://www.todoperros.com/wp-content/cache/busting/1/wp-includes/js/jquery/jquery-1.12.4.js:0 in the second error screenshot.

Hi, i write a post, maybe you can be interested:
https://blog.dismal.site/problemas-en-wordpress-con-utroro-com-y-horselorse5151/

Well, I reckon I have cleaned up all the files.

I installed this plugin “Wordfence Security – Firewall & Malware Scan” to identify all infected files, and updated one plugin that wasn’t updated.

Thanks!

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.