Here are some common malware (virus) file names that WordPress Doctor has discovered recently.


List of malware file names commonly found in WordPress

#. File Name Included in wordpress files?
1 Random alphanumeric (about 6 characters).php ×x
2 index.php 0(s)
3 lock360.php ×x
4 radio.php ×x
5 content.php ×x
6 about.php 0 (3 items in wp-admin folder)
7 admin.php 0 (may be included in plugins)
8 small.php ×small.php (may be included in plugin)
9 moon.php ×x

These files can be files that hackers have illegally embedded by exploiting vulnerabilities in WordPress or by hijacking administrative privileges.
In many cases, they serve as an entry point for hackers to deface the site, known as a backdoor.

In particular, if files in the table above that are not included in the general WordPress file set (e.g. small.pbp) are placed by people, it is highly suspected that the site is infected with malware.

How to detect and remove malware?

It is often quite difficult to detect and remove all such hacker-embedded malware by hand, as it may be hidden in deep layers.

It is possible to detect and remove malware with a high degree of accuracy by using a plug-in that mechanically scans for malware.

Free WordPress:Malware Scan & Security Plug-in [Malware and Virus Detection and Removal].

If reinfection is repeated even after detection and disinfection by plug-ins, malware may be embedded via other sites on the server, malware may be written in an infinite loop of server processes, or mechanical detection may have limitations and may not be able to remove everything.

In these cases, we recommend that you contact a malware removal specialist.

Related Posts:

  1. What are the strongest permissions to prevent malware infection in WordPress?
    We will introduce the strongest file write permissions (permissions) to prevent malware infection in cases such as repeated malware infections in WordPress....
  2. How do I stop process-resident malware in WordPress?
    Some of today’s malware is of the type that writes an infinite loop (or delayed process) into the server process and resides there....
  3. If you can’t find wordpress malware, where is the malware hidden?
    We will explain how hackers hide malware when WordPress has been defaced and no malware is found....
  4. 5 characteristics of malware files that infect WordPress
    Here are some characteristics of malware files that can infect WordPress. If such a file is found on the server, it is most likely malware....
  5. What is Japanese SEO Spam, a type of WordPress malware?
    We will explain about Japanese SEO Spam, which is a malware that embeds fake Japanese product sites in WordPress....
  6. If your wordpress index.php has a one line include statement @include it is infected with malware
    If there is a one-line include statement @include in the index.php in the top directory of WordPress or in the theme, etc., it is highly likely that the site is infected with malware....