WORDPRESS · Documented customer cases

WordPress malware: Munich dental practice

No administrator access and suspicious files at a Munich dental practice: documented malware findings, cause and repair status.

June 23, 2026 · Published original case

Initial situation and request

Wartungshelden Repair requested: 23.6.2026 19:18

After receiving the FTP credentials and administrator account, we found a chaotic collection of unusual files and content in configuration files, htaccess and other files in the root directory. Administrator access was no longer possible.

Findings and causes

Virus scan result:
Backdoor (py.alfa)
Backdoor (bash.alfa)
Trojan (htaccess)

Causes:
Once again, several outdated plugins were responsible for the vulnerabilities!

Outcome and completion

Repair status: Clean & Ready

Wartungshelden Repair completed: 23.6.2026 20:31

Published original case: wartungshelden.de ↗
Content checked on 11.11.2026

WORDPRESS · Repair / Emergency

Request support

Services and inspection intervals depend on the selected package. Repairs and additional work are agreed separately. No protection can exclude every attack; restorability and duration depend on the specific incident and available backups.

Request support ↗repair@wartungshelden.de 0209 98898746

Contact and booking in German. The original German legal texts apply.

Documented customer cases

Documented customer cases →

Documented customer cases · 01

WordPress recovery: practice in NRW

A practice in NRW had its WordPress website restored. The case records the cause, status and documented intervention times.

Read case study →

Documented customer cases · 03

WordPress malware: Hamburg agency case

Malicious code in a Hamburg agency’s backend: the published case documents the cause, repair status and processing times.