WordPress.org

1. thismeanswaugh
   Member
   Posted 7 months ago #

   Hi guys,

   there's a million forum posts close to this, but none that I could see that matched it exactly. I'm using the Gridlocked WordPress theme for my website

   http://thismeanswaugh.com

   A couple of weeks ago my hosting company contacted me to say that spam had been sent out from the mail on my site - which I never use - and so they'd shut the site down while they sorted it. Very shortly after that it was put back up and the site looks fine, but if you google the URL it comes up with a lot of viagra spam as the description. This also happens if you post links to the site on social networking sites (which I need to do a lot).

   My host reckoned the spammers got through via a dodgy plug-in and said if I removed the plug-in it would fix it. I did, but the spam is still there somewhere.

   I've been trawling through the code but can't find any trace of it. Any suggestions? (I'm not very skilled with coding I'm afraid)

   Andy

2. esmi
   Theme Diva & Forum Moderator
   Posted 7 months ago #

   Try reading through these resources:
   http://codex.wordpress.org/FAQ_My_site_was_hacked
   http://wordpress.org/support/topic/268083#post-1065779
   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
   http://ottopress.com/2009/hacked-wordpress-backdoors/

   http://sitecheck.sucuri.net/scanner/

3. Tim S
   Member
   Posted 7 months ago #

   It may be an indexing issue. Google will crawl your website and store that information. If Google crawled your website while there was hacked code on the website, it will display that. You can ask Google to re-index the website.

   You'll definitely want to check your code to make sure there's no leftovers that you missed. You may want to think about doing a fresh install, then migrating the DB and wp-content folder over as well.

   If you choose to restore your website fresh, I would suggest making a backup of the current site first.

Reply

You must log in to post.