codehaven - php snippets - coding help
Generic filters
Exact matches only

How to freshen up your WordPress core files after VCD Malware

17th January 2019

Admin WP

wordpress category

After somehow getting a Malware infection (VCD) I needed to overwrite all bad files as my WordPress was not working as expected.

To do this :

  1. Check for weird content in your functions.php
  2. Delete any unused themes….
  3. Keep the following files:
    • wp-content Folder
    • htaccess file (not shown)
    • wp-config.php
  4. But delete the files shown in image, except any custom files you have made in your WordPress root.
  5. Upload a new fresh version of WordPress and then login.
  6. You will be then asked to update the database as it knows they are new files.
  7. Download a program called Agent Ransack
  8. Using Agent Ransack – Search for ‘karors’ in all your WordPress files and delete code where necessary
  9. Seach for @file_get_contents and just look for unexpected code.


Remember you can change the debug setting to ‘true’ in the wp.config.php to see what’s happening.

Then it should all work again. (Hopefully)

Was this code snippet helpful?