sym404 site hack overwriting htaccess file

[Sitesup]

Hi – have had a server compromise.
Currently working through, the issue I hope you can assist with, is the domains affected have had
1 – BPS has been removed – as in the plugin is no longer on the domains.
2 – When I reinstall and activate, the htaccess files are immediately overwritten again. (one site has had dozens of htaccess files injected throughout)
Hoping this is something you have heard of and can assist with.
thanks so much

[AITpro Admin]

Takes about 30 minutes per site to clean up a hacked hosting account.  See this forum help topic on how to clean up a hacked hosting account > https://forum.ait-pro.com/forums/topic/wordpress-hacked-wordpress-hack-cleanup-wordpress-hack-repair/

[Author]

Posts