WORDPRESS · Documented customer cases

WordPress malware: Munich dental practice

No administrator access and suspicious files at a Munich dental practice: documented malware findings, cause and repair status.

June 23, 2026 · Published original case

Initial situation and request

Wartungshelden Repair requested: 23.6.2026 19:18

After receiving the FTP credentials and administrator account, we found a chaotic collection of unusual files and content in configuration files, htaccess and other files in the root directory. Administrator access was no longer possible.

Findings and causes

Virus scan result:
Backdoor (py.alfa)
Backdoor (bash.alfa)
Trojan (htaccess)

Causes:
Once again, several outdated plugins were responsible for the vulnerabilities!

Outcome and completion

Repair status: Clean & Ready

Wartungshelden Repair completed: 23.6.2026 20:31

Published original case: wartungshelden.de
Content checked on 11.11.2026

WORDPRESS · Repair / Emergency

Request support

Services and inspection intervals depend on the selected package. Repairs and additional work are agreed separately. No protection can exclude every attack; restorability and duration depend on the specific incident and available backups.

Request support repair@wartungshelden.de 0209 98898746

The form is displayed in your selected language. The German originals of the linked documents govern the contract. Translated confirmations are provided to help you understand them.

Documented customer cases

Documented customer cases · 01

WordPress recovery: practice in NRW

A practice in NRW had its WordPress website restored. The case records the cause, status and documented intervention times.

Read case study

Documented customer cases · 03

WordPress malware: Hamburg agency case

Malicious code in a Hamburg agency’s backend: the published case documents the cause, repair status and processing times.