• Our WordPress site seems to have gone down over the weekend, and what was once a pretty robust site is now a blank white page with only a password field (that won’t accept our WP password). It’s at https://www.commonsatballard.com.

    We recently received a notification from our web host on 8/28 that some suspicious files had been identified, so we removed them (our developers said it was OK, that they weren’t crucial to the operation of the site). For what it’s worth, here are the files/logs that our host called out:

    FILE HIT LIST:
    {CAV} GGS.Team.detection25.A : /home/commonsa/public_html/wp-admin/network/fWzonJv.php
    {CAV} Atomicorp.PHP.Shellexec.20101116140201 : /home/commonsa/public_html/wp-content/themes/annotum-baes/wp-booter.php
    {CAV} GGS.Team.detection25.A : /home/commonsa/public_html/wp-content/themes/annotum-baes/xml_rpc.class.php

    The site was just fine for several days, and we made some minor updates on Thursday (9/1). Things looked great, but we didn’t visit the site over the long weekend, and someone just pointed out that this new blank page problem was happening as of this morning. (When the host had suspended it due to the suspicious files, it was a different error message…this is new.) From what I can tell through FTP, the files seem to all still be there, although I have no idea where to look to find out what’s wrong.

    Has anyone seen anything like this before? Any advice would be appreciated!

    Thank you!

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter xtiana

    (@xtiana)

    (Side note, we did change our passwords last weekend, immediately after being notified of the suspicious files. They’re long/complex passwords. We haven’t been logging in over any public wifi networks or anything, so I don’t necessarily suspect malware. Our host did re-scan everything and found nothing suspicious back on 8/28 after we deleted the files they had flagged.)

    • This reply was modified 8 years, 2 months ago by xtiana.
    Thread Starter xtiana

    (@xtiana)

    And now the site seems to have miraculously reappeared, apparently with no help from our web hosts. Any advice as to why this kind of thing might happen and how to prevent it from happening again would be much appreciated. Thank you!

    • This reply was modified 8 years, 2 months ago by xtiana.
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Website Disappeared, Now Only Blank Page w/ Password Field’ is closed to new replies.