Need help with wordpress site hacked by the “Chrome Search Contest 2021”

  • Keep having a new website I install on my website platform hacked by the “Chrome Search Contest 2021” hack.

    When I FTP in I can see .bt and .default files that are part of the hack and I keep deleting them but new files keep reappearing. I’ve even exported my WordPress XML and reinstalled it into a new directory only to have these infected.

    So something is letting this hack back in that I am missing.

    Anyone have any luck deleting this from their site that can point me in the right direction?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

    Thread Starter phoenixim

    (@phoenixim)

    Thanks. Already have instituted a lot of the principles even installed wordfence and malcare and it was still able to infect separate directories where I installed WordPress.

    So missing something that was installed and was hoping someone had experience and tracked down how this hack works.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Need help with wordpress site hacked by the “Chrome Search Contest 2021”’ is closed to new replies.