dodgy files keep coming through the cache directories

  • Hi

    I’m using your plugin. I had a site had a few dodgy files found on the client site. Some dodgy files in Storefront directory and within your cache directory.

    I’ve installed Wordfence also to do some scanning and finding all dodgy files to remove them etc.

    The scan came up with a few dodgy files in the cache directory in wordpress. So I removed your plugin entirely which I thought would fix it. I’ve removed the affected file in Storefront also (only 1)

    Then I reinstall your plugin, and activate it, then some new different dodgy files appear in that cache directory under the wp-includes after installing your plugin.

    So I’m trying to figure out HOW to fix it, find all files that are causing it. Not sure HOW or WHY it is coming directly into that directory of your plugin when I reinstall it completely.

    Do you have any suggestions that can help please?

    All suggestions and help would be greatly appreciated.

    Thanks

    Kristin

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Emre Vona

    (@emrevona)

    you have already hacked and when a page is cached, the doddy file is saved to the cache folder.

    Thread Starter kristinubute

    (@kristinubute)

    HI

    If you could reply with a bit more detail HOW the cache plugin works please?

    Are you actually saying that the actual dodgy file is transferred to the cache directory (which is picked up from somewhere else in the website backend?)

    Is that what you mean ?

    Therefore if I see the directory in the cache of the dodgy file, then I can FIND that same Directory and FILE in the WordPress directories to locate the dodgy file?

    I have wordfence active and scanning and it does NOT pickup that dodgy file within other directories. It seems to be ONLY found in your plugin directory only when caching is on …

    Please provide MORE detail for help please.

    Thanks

    Kristin

    Plugin Author Emre Vona

    (@emrevona)

    This has nothing to do with caching plugins. You can also use another caching plugin if you want.

    You just need to know this; Your site has been hacked. You need a new fresh WordPress installation.

    Thread Starter kristinubute

    (@kristinubute)

    Hi

    I didn’t say the cache plugin was causing the issue.

    I am new to a website being compromised. We all need to learn on tactics when this happens. I am not alone about this where other people would want some advice and help also and strategies we can do in place when this happens. Also I am not exactly familiar with HOW a cache plugin works and HOW it extracts info from ALL over wordpress etc.

    So therefore can you explain if that is the case, I am better off to Uninstall ANY CACHE Plugin completely also wouldn’t that be better to do also, correct ?

    Otherwise if I did these steps .. Install fresh WordPress and NOT REMOVE ANY Cache plugin, the dodgy file would still RESIDE in your Cache plugin, is that correct ?’

    Therefore just a few more details on HOW the cache plugin works would be appreciated to understand more. We are all here to learn from what happens with our wordpress websites and get support as required.

    Please advise if I am correct, that if I do NOT remove the cache plugin after reinstalling WordPress, I will have the exact same issue again I would assume, as some dodgy files would be in the cache directory?

    If that is the case, we should REMOVE ALL Cache plugins as well , is that correct ?

    Thanks

    Plugin Author Emre Vona

    (@emrevona)

    I cannot know how you have been hacked, so I cannot give you any specific advise. I can give you a general advise.

    I am not a security consultant of WordPress. You’re looking for support in the wrong place.

    Thread Starter kristinubute

    (@kristinubute)

    I am asking about how a Cache plugin works, that’s all to understand better.

    Please advise if I am correct, that if I do NOT remove the cache plugin after reinstalling fresh WordPress, I will have the exact same issue again I would assume, as some dodgy files would be in the cache directory?

    I am not asking you to fix the issue or anything else.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘dodgy files keep coming through the cache directories’ is closed to new replies.