{"id":58136,"date":"2016-04-18T18:34:56","date_gmt":"2016-04-18T17:34:56","guid":{"rendered":"https:\/\/pl.wordpress.org\/support\/topic\/powracajacy-zlosliwy-kod\/"},"modified":"2016-08-05T22:17:11","modified_gmt":"2016-08-05T22:17:11","slug":"powracajacy-zlosliwy-kod","status":"publish","type":"topic","link":"https:\/\/pl.wordpress.org\/support\/topic\/powracajacy-zlosliwy-kod\/","title":{"rendered":"Powracaj\u0105cy z\u0142o\u015bliwy kod"},"content":{"rendered":"<p>W folderze wp-admin pojawia si\u0119 katalog &#8222;scripts&#8221; a w nim trzy pliki php o nazwach sriptxxx.php (gdzie xxx to cyfry) z jakimi\u015b odno\u015bnikami do rosyjskich stron. Po ich usuni\u0119ciu, pojawiaj\u0105 si\u0119 ponownie.<br \/>\nZmienia\u0142em has\u0142a (do wp i ftp), user\u00f3w, htaccess tylko dla mojego IP, skan sucuri nic nie wykry\u0142. Strona dzia\u0142a OK, ale co\u015b trzeba z tym zrobi\u0107, zreszt\u0105 admin zg\u0142asza z\u0142o\u015bliwy kod. Na serwerze s\u0105 dwie instalacje WP i na ka\u017cdym jest ten sam problem.<\/p>\n<p>Gdzie szuka\u0107 robala? Czy mo\u017ce lepiej od razu r\u0119cznie wgra\u0107 nowe, czyste pliki WordPressa?<\/p>\n","protected":false},"template":"","class_list":["post-58136","topic","type-topic","status-publish","hentry","topic-tag-atak","topic-tag-wirus","topic-tag-wp-admin","topic-tag-zlosliwy-kod"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/pl.wordpress.org\/support\/wp-json\/wp\/v2\/topic\/58136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pl.wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/pl.wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/pl.wordpress.org\/support\/wp-json\/wp\/v2\/topic\/58136\/revisions"}],"wp:attachment":[{"href":"https:\/\/pl.wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=58136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}