What changes the contents of .htaccess?

Question

htaccess

Hello everyone. I have a site xn--80a2afg.xn--80asehdb on WP. The other day I ran into a problem. I caught a malicious script that redirects from site links to the left services. I delete .htaccess and set it to default, everything starts working fine, but after a while everything repeats, but the file itself is empty. What to do? Tell?

Answer 1

Cut out all .php files from uploads, save the wp-config.php file, compare its contents with its description and with the structure of the wp-config-sample.php file. If there are discrepancies (except for database connection parameters and other legitimate options), for example, functions/function calls, move the necessary parameters to wp-config-sample.php and rename to wp-config.php (while postponing this file). Save theme.
Replace all wordpress files with original ones. Put the previously set aside wp-config.php in its place. Check the theme for obscure/third-party code. Check file and folder permissions.