Drifted-Citric

Hi,

This morning I found a strange folder in the root WordPress directory of one of our sites.

I’ve researched it on Google and on www.remarpro.com, but there doesn’t seem to be any information on it.

The folder is named:

drifted-citric

When you open the folder there are two files:

.htaccess
&
index.php

.htaccess contains the following lines:
———————————————
RewriteEngine On
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /drifted-citric/index.php [L]
———————————————

index.php contains multiple lines of cryptic code, of which I won’t paste here.

When opening the home page of the website, I get a blank page or it hoses. One of our other admins said that the MySql password wasn’t working.

Has anyone here encountered this scenario or one like it and if so, what can you tell me about it and how is it resolved.

My take is that I have to delete the drifted-citric folder and contents, then change the MySQL password. However, will that be enough. I plan on contacting the Webhost and find out how this could have happened. If I can’t get a satisfactory response, I’m going to recommend my client to move her sites to another webhost.

Thanks,

BL