Get Off Those Maliciously Loaded Scripts!
Download this free Anti-Malware Plugin for WordPress.

You can unregister a site or transfer your registrations from the members page. Or you can simply re-register a site by ckicking on the green checkbox in the upper-right side of the Anti-Malware Setting page in the wp-admin on that site.

If the scan finds a file that is marked as a Known Threat then you can click on the red linked file to examine the contents. There you will have the option to whitelist that file, however, this is a passive action that does not really solve anything and ignores the bigger issue. Either you are whitelisting an infected file that contains malicious code which should not be whitelisted or my plugin is incorrectly flagging this code as a Known Threat when it should not be. Can you please send me the file or files that you are wanting to whitelist so that I can check them and make adjustments to my definition updates if needed?

That error means that there is no response from your server when testing the session feature. I am not sure why your site will not start a session but it is usually due to a server configuration issue, like php.ini settings or the permissions on the /tmp/ directory (or wherever the session files are kept on your server). Check your server’s error_log files and ask your host to verify that session files can be stored on your server.

It would seem that there is a permission issue on those files that prevents them from being fixed by any PHP process on your webservers. You could try to change the permissions on those files so that they can be automatically fixed by my plugin.

If you need more specific guidance then I would need more detailed information about the specific situation on your server. Please feel free to send me screenshots or any other specific info that might help if you need further assistance.

You would need to fix whatever is wrong with that server that prevents it from creating a persistent session. Maybe it is the wrong permissions on the /tmp/ directory or that partition is full, or maybe the session path is set to a directory that does not exist. You would need to refer to your error_log files to find the answer that pertains to your particular situation.

The MW:BLK:2 is just a generic label that sucuri assigns to that type of infection, it refers to a blacklisted domain used in your site’s code.

If you click on the details and is says 31wp.org then you would need to look for script references in your site’s HTML that point to 31wp.org. Sucuri has labeled the jquery.js URL at that domain as a malicious threat but that URL does not seem to be working any more anyway so I think your site will be ok. Just just the page content for script tags and make sure your theme does not refer to 31wp.org in the header.php or footer.php files.

This sounds like it could be a direct SQL injection. the hacker might have access to alter your database without having access to your servers filesystem. You can try changing your DB_PASSWORD and updating your wp-config.php file to match the new password in the hopes that the hackers cannot get back in but if they have root access to your DB server then you would need to move to a more secure host (unless your current hosting provider can make you DB more secure on their server).