title: Hacked Wordpress .htaccess
body: <p>I have a wordpress site that features a .htaccess and a file called postfs.php.
  But when I try to delete them, they are written again.
  I tried to delete all the files on the site, change permissions, check the cron ... but nothing to do. These files appear as soon as I delete or edit them.</p>
  <p>The contents of the file are as follows:</p>
  <p>.htaccess:</p>
  <pre><code> &lt;FilesMatch &quot;.(PhP|php5|suspected|phtml|py|exe|php|asp|Php|aspx)$&quot;&gt;
   Order allow,deny
   Deny from all
  &lt;/FilesMatch&gt;
  &lt;FilesMatch &quot;^(postfs.php|votes.php|index.php|wjsindex.php|lock666.php|font-editor.php|ms-functions.php|contents.$
   Order allow,deny
   Allow from all
  &lt;/FilesMatch&gt;
  AddType application/x-httpd-cgi .sh
  &lt;IfModule mod_rewrite.c&gt;
  RewriteEngine On
  RewriteBase /
  RewriteRule ^index.php$ - [L]
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule . index.php [L]
  &lt;/IfModule&gt;
  </code></pre>
  <p>And the postfs.php have that content: <a href="https://www.unphp.net/decode/1b6fc6fb520dc744ba13e970d2fd5699/" rel="nofollow noreferrer">PHP Decode</a></p>
  <p>How can avoid the restoring of this files?
  Has anyone had similar experiences?</p>