• Hello, I’ve caught wind of my website acting strange when Google accessibility flagged a few things which it shouldn’t have. I finally noticed that upon first visiting the website, it would show an array of random characters as seen here: https://prnt.sc/SrUB-WXTCuFt

    Upon investigating, I noticed that some malware was embedded into my WP config files as seen here: https://prnt.sc/6Xzt4fi5S3ef

    What is the best way to remove all traces of this malware and prevent this from happening again? I have no idea how/when this happened initially. I have updated WP to the latest but that is the only thing I have done so far.

    Thank you for your help!

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    Also, rebuild your wp-config.php file based on wp-config-sample.php.

    If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

    wordfence is a great plugin to keep wordpress site safe and secure

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Malware embedded, causing secret redirects’ is closed to new replies.