ARQ files: File Hash – deleted many now can’t access wp-admin

[beatty2020]

Hi,

MScan showed many dozens of Suspicious files marked with “File Hash,” many in the BPS Pro plugin folder, some in Gravity forms. I deleted a bunch and then went to my main wp-admin dashboard to look at something else and … got an error Page not Found and then a new screen saying, “There has been a critical error on this website. Please check your admin inbox email for instructions.”

I clicked the link in my email to log in via Recovery Mode to see that the BPS plugin had been disabled:

This plugin failed to load properly and is paused during recovery mode.

Should I reinstall BPS Pro and run the activation? What’s the next step to take here?

I have changed all passwords on the server, ftp access, and would like to also re-do the users’ passwords. But am waiting ….

Please advise, thanks.
Beatty

[AITpro Admin]

Sounds like MScan detected false positives for some reason. So yes reinstall BPS Pro and Gravity forms. Use FTP or your web host control panel file manager and delete the /bulletproof-security plugin folder and the gravity forms plugin folder. Then install them on the WP Plugins page.  By doing this manual install method you will keep all of your BPS and Gravity forms plugin settings.

The only time that you should delete files that MScan detected as suspicious is after checking them to see if they have been tampered with. You can also send me files via email so that I can check them.

[Author]

Posts