This is a message that I got from the server provider:
The server came to place malicious scripts through a gap in the software.
In the ftp logs, we did not find signs of forced entry and file substitution at
proves that the burglary took place through the installed service.
Is the current version of the script is free of hazards?
Below is listining for malcious files:
public_html/wp-settings.php
public_html/wp-includes/js/template.php
public_html/wp-includes/js/tinymce/utils/option.php
public_html/wp-includes/ID3/module.audio-video.flv.php
public_html/wp-includes/ID3/module.audio.flac.php
public_html/wp-includes/wp-diff.php
public_html/wp-includes/class-wp-admin-bar.php
public_html/wp-includes/rewrite.php
public_html/wp-includes/pomo/javascript.php
public_html/wp-includes/feed.php
public_html/wp-includes/wp-db.php
public_html/wp-includes/Text/Diff/Renderer.php
public_html/wp-includes/ms-default-filters.php
public_html/wp-includes/feed-rss.php
public_html/wp-includes/theme-compat/header.php
public_html/wp-content/upgrade/db.php
public_html/wp-content/themes/flexform/includes/widgets/sql.php
public_html/wp-content/themes/flexform/includes/meta-box/inc/fields/textarea.php
public_html/wp-content/themes/flexform/includes/meta-box/lang/session.php
public_html/wp-content/themes/flexform/includes/options/fields/radio/cache.php
public_html/wp-content/themes/flexform/includes/options/fields/gfonts/general.php
public_html/wp-content/themes/flexform/includes/options/validation/js/menu.php
public_html/wp-content/themes/flexform/includes/options/validation/no_special_chars/config.php
public_html/wp-content/themes/flexform/includes/page-builder/assets/images/icons/elements/admin.php
public_html/wp-content/themes/flexform/includes/page-builder/composer/lib/shortcodes/clients.php
public_html/wp-content/themes/flexform/includes/page-builder/composer/lib/shortcodes/recent-posts.php
public_html/wp-content/themes/flexform/includes/page-builder/composer/lib/shortcodes/testimonial-slider.php
public_html/wp-content/themes/flexform/includes/taxonomy-meta-class/css.php
public_html/wp-content/themes/flexform/includes/option.php
public_html/wp-content/themes/flexform/images/prettyPhoto/dark_rounded/search.php
public_html/wp-content/themes/flexform/images/preset-backgrounds/utf.php
public_html/wp-content/themes/flexform/images/flags/dirs.php
public_html/wp-content/themes/flexform/css/font/search.php
public_html/wp-content/plugins/breadcrumb-navxt/includes/multibyte_supplicant.php
public_html/wp-content/plugins/facebook/facebook-user.php
public_html/wp-content/plugins/codestyling-localization/css/images/dirs.php
public_html/wp-content/plugins/revslider/revslider.php
public_html/wp-content/plugins/revslider/inc_php/framework/functions.php
public_html/wp-content/plugins/revslider/rs-plugin/images/view.php
public_html/wp-content/plugins/revslider/rs-plugin/videojs/template.php
.