I’ve got this malware on my site, this file keep popping up: xm1rpc.php and then new index.php and .zip files start appearing.
I’ve run the Anti-Malware scan a few times but this is still happening. Anyone have luck removing it?
Thanks!
I see that your site in is a subdirectory on a HostGator shared hosting account. It would be most effective if you could scan the site_root or even the account root. There could be other infected sites on this server that are reinfecting your site. There may also be .htaccess files or cron jobs on your account that will affect all the sites in your account. How many sites do you have on HostGator?
I just have one. I did run the scan at the public_html level, how do I run it above that?
It may be coming in from another account on the server. The best thing to do would be to move your site to a more secure hosting environment. I offer Super Secure Hosting if you are interested, it’s $12/month per site and you will not get reinfected on my server