Laatste ingrepen
Remediator-runs met vaste labels: fixed · replaced · quarantined (dry-run = WOULD_*). Geen secrets, geen payloads.
Fixed
4
Replaced
4
Quarantined
4
Would_* (dry-run)
0
Recent
fixed chirurgisch hersteld · replaced schone upstream · quarantined weggezet · would_* dry-run
| Tijd | Action | Site | Pad | Method |
|---|---|---|---|---|
| 2026-09-08T13:33:47+02:00 | deleted | www | wpcore | sql_delete_posts_meta_terms_comments_then_user |
| Deleted wpcore id=9 and all authored posts after inventory; see .remediate-backups/www/wpcore-posts-inventory-* · | ||||
| 2026-09-08T13:27:31+02:00 | fixed | multi | .htaccess | htaccess_hardening |
| Applied SNIPPET A/B where gaps; preserved WP permalinks; loopbaancoa untouched · | ||||
| 2026-09-08T13:26:22+02:00 | deleted | www | mod736_users | sql_user_delete |
| Deleted malicious/unused www WP users; no password hashes logged · | ||||
| 2026-09-08T13:25:50+02:00 | quarantined | anngalland.com | anngalland.com/wp-content/plugins/wordfence/crypto/vendor/paragonie/sodium_compat/namespaced/Core/Curve25519/Ge | quarantine |
| Quarantined 8 Wordfence Ge impostors (SMTP/MinTime/Misc/gcheckout/invia/sais/sais_inv_step1/ssi) to /home/imageee/.remediate-backups/anngalland.com/ge-droppers-202609081325 · | ||||
| 2026-09-08T12:48:49+02:00 | quarantined | www | www/wp-includes/sodium_compat/src/Core/Curve25519/Ge/da_DK.php | quarantine |
| cookie_injectscript impostor da_DK.php in sodium_compat Ge/; forensic+quarantine; siblings left in place pending review · · quarantine: da_DK.php | ||||
| 2026-09-08T09:01:21+02:00 | fixed | anngalland.com | anngalland.com/wp-content/themes/optimizedlist/functions.php | strip_wp_infected |
| Stripped padded @include_once preamble from optimizedlist/functions.php; theme body kept · | ||||
| 2026-09-07T23:27:16+02:00 | replaced | daunadefraye.dog | daunadefraye.dog/wp-includes/meta.php | replace_wp_core |
| Replaced infected wp-includes/meta.php (header backdoor @eval HTTP_*); forensic backup meta.php.forensic-20260907-232639 · backup: meta.php.forensic-20260907-232639 | ||||
| 2026-09-07T18:30:00+02:00 | quarantined | kleirrr.be | kleirrr.be/wp-content/plugins/wpforms-lite/src/Integrations/PayPalCommerce/PaymentMethods/ApplePay/misc.inc.php | quarantine |
| historical seed from 2026-09-07 live apply (metadata only) · backup: misc.inc.php.forensic-20260907-184649 | ||||
| 2026-09-07T18:30:00+02:00 | replaced | kinglun.ch | kinglun.ch/wp-content/themes/twentytwenty/classes/class-twentytwenty-non-latin-languages.php | replace_theme_file |
| historical seed from 2026-09-07 live apply (metadata only) · backup: class-twentytwenty-non-latin-languages.php.forensic-20260907-184646 | ||||
| 2026-09-07T18:30:00+02:00 | fixed | bluesalt | bluesalt/wp-content/themes/hello-elementor/functions.php | strip_wp_infected |
| historical seed from 2026-09-07 live apply (metadata only) · backup: functions.php.forensic-20260907-184631 | ||||
| 2026-09-07T18:30:00+02:00 | quarantined | imageert.be | imageert.be/wp-content/plugins/matomo/app/vendor/prefixed/twig/twig/src/Node/Expression/Binary/criminel.php | quarantine |
| historical seed from 2026-09-07 live apply (metadata only) · backup: criminel.php.forensic-20260907-184701 | ||||
| 2026-09-07T18:30:00+02:00 | replaced | hillsiderebel.com | hillsiderebel.com/wp-content/themes/fotografie/inc/customizer/upgrade-button/class-customize.php | replace_theme_file |
| historical seed from 2026-09-07 live apply (metadata only) · backup: class-customize.php.forensic-20260907-183043 | ||||
| 2026-09-07T18:30:00+02:00 | replaced | hillsiderebel.com | hillsiderebel.com/wp-content/themes/fotografie/404.php | replace_theme_file |
| historical seed from 2026-09-07 live apply (metadata only) · backup: 404.php.forensic-20260907-183043 | ||||
| 2026-09-07T18:30:00+02:00 | fixed | hillsiderebel.com | hillsiderebel.com/wp-config.php | rebuild_wp_config |
| historical seed from 2026-09-07 live apply (metadata only) · backup: wp-config.php.forensic-20260907-183043 | ||||