How to restore a WordPress site after a virus infection?

Question

Malware

The web host, Luxsci.com, has removed files from the Wordpress website (amerares.com). They claimed that some of the files had been hacked. They can provide a list of affected files. Files affected by the web service provider: Html.Trojan.Hidelink63901900) /xd1/homes/hash/60/a2160/96/08/u20896/amarares.com/www-ssl/blogs/confcommblog/wp-includes/default -widgets.php(Html.Trojan.Hidelink-6390190-0)/xd1/homes/hash/60/a2160/96/08/u20896/amerares. Trojan.Hidelink-6390190-0) /xd1/homes/hash/60/a2160/96/08/u20896/amarares.com/www-ssl/blogs/wp-includes/default-widgets.php (Html.Trojan.Hidelink -6390190-0) The viruses/trojans that caused the files to be deleted are listed at the end of the path for each file above. How to restore the site?

Answer 1

https://revisium.com/ai/ - handles
https://virusdie.ru/ - not handles

Answer 2

Cleaning a site on wp from an infection is another occupation - hundreds or even thousands of files throughout the site can be infected. Aibolit or any other malware scanner does not guarantee that it will find all such files; in any case, you will have to search manually.
In addition, finding and cleaning everything is half the battle, the main thing is to find a vulnerability and fix it, as well as to protect your wp-site as much as possible - change all admin pairs - login-password, possibly double admin authorization, admin url substitution, etc., etc. And be sure to monitor, best of all, for changed files ...
I had a similar problem about 5 years ago on New Year's Eve, I managed to completely restore everything and launch the protected site only after 3 weeks ...

Answer 3

1. Delete all system files and folders, except for the library
2. Roll on top of system files from a clean Wordpress
3 distribution. ...
4. Profit

Answer 4

Recently answered a similar question:
How to find a hole in Wordpress?