WebFaction
Community site: login faq

Following some broad hacking of my WordPress sites, I'm copying my theme and uploads folders and the databases to re-create the sites. One .sql, file, though, triggers a Microsoft Security Essentials flag, and won't download.

  1. Can I take this as a true indication that there's hacked code in the WP database itself?
  2. Can I trust MSE to identify if other .sql files have been similarly hacked?

The only site that has this issue is brand new, with almost no content to speak of. Since I generate content offline and cut/paste it into the posts, it's not a big deal to just nuke this particular site from space and restart. But I'm worried about my other databases now, and wondering if there's something in particular I should do to check them.

asked 10 Nov '13, 08:28

mattshepherd
4531530
accept rate: 0%


Hello,

  1. Not really, but you still are better off investigating the problem - if there is indeed some malicious code inserted in the database that will be a javascript piece of code that is to be displayed on your page(s) to infect visitors. You can dump all your tables one by one and then try downloading them separately to quickly narrow down your search (try with the wp_posts table first).
  2. That actually depends on the results of the investigation you will have carried in 1. Any decent antivirus solution should detect such javascript infections in a web page so once you identify the offending code you will be able to run additional tests on it - perhaps using additional virus scanners, such as housecall.trendmicro.com, or cloudantivirus.com, and see which one fares best.

If you need more information then please contact us back here.

Sincerely,

Valentin I. WebFaction Support
--
WebFaction - Smarter web hosting
http://webfaction.com
http://twitter.com/webfaction - http://facebook.com/webfaction

permanent link

answered 10 Nov '13, 10:17

valentini
2614
accept rate: 28%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×244
×84
×9
×5

question asked: 10 Nov '13, 08:28

question was seen: 1,833 times

last updated: 10 Nov '13, 10:17

WEBFACTION
REACH US
SUPPORT
AFFILIATE PROGRAM
LEGAL
© COPYRIGHT 2003-2019 SWARMA LIMITED - WEBFACTION IS A SERVICE OF SWARMA LIMITED
REGISTERED IN ENGLAND AND WALES 5729350 - VAT REGISTRATION NUMBER 877397162
5TH FLOOR, THE OLD VINYL FACTORY, HAYES, UB3 1HA, UNITED KINGDOM