There are many things you need to do to fix a hacked site. Lots of googles on how to do it. Important things to do: change passwords on everything – WP accounts, FTP accounts, hosting accounts. Strong passwords, of course. remove the user called ‘admin’ (or just give it Subscriber level, after making a new … Read more
Help determining if the following are legitimate files
It looks like some javascript or advertising feature may redirecting visitor again and again. You should try debug it from browser console. Try to look after javascript events. Or reveal your domain for community to help you. Or if you know ask for help experienced programmer to solve your issue. Because, there are many reasons … Read more
Spam Content Serving from old cached version of site?
Well your site has been compromised and you have to clean house. Here are two guides you can start with: http://codex.wordpress.org/FAQ_My_site_was_hacked Verifying that I have fully removed a WordPress hack?
Yes ! This is a malicious code – if you don’t have any backup. I will suggest you to remove this code from top of every file manually. There is no “Genire” plugin/script which can safely remove it from your every file. If you are good with PHP, you can write your own script. Follow … Read more
You need to use: https://www.google.com/webmasters/tools/home (you need a gmail account – since it’s Google) Add your website to the platform and ask Google to scan your website for any more malware. It might take 24-48 hours. Once Google is happy that there are no more issues, your website ratings will be restored.
According to Sucuri, there are some defacement campaigns underway. Also, it appears that there are attempts at remote code execution. So yes: if you’re running 4.7 or 4.7.1, upgrade to 4.7.2 as soon as possible.
As I was using MariaDB, the following update did the fix: update wp_posts set post_content = REGEXP_REPLACE(post_content,'(*CRLF)<noindex>.*</noindex> ‘,”) See https://dba.stackexchange.com/questions/234774/mariadb-multiline-regex/234778#234778
If you want to be certain your site is clean, you can either start with a fresh install of WordPress, all of your plugins and the theme. An alternative would be to use the WP CLI verify-checksums to check your core and plugins for any modifications. Perhaps the hardest one to clean is your database … Read more