Removing GReader RSS spam

  • A client’s website was recently hacked and spam was appearing in RSS feeds read through Google Reader (the file viewed on its own was fine). After reading up on the issue I found the php file causing the issues, deleted it, upgraded WordPress and all the plugins.

    I’m pretty certain the file I removed was causing it, but the spam still appears in (old) RSS entries. I’m hoping that no more spam will appear, but is there any way of removing the existing spam? It seems to still be there even for new subscribers.

    The website is https://www.bronwenclune.com/

Viewing 2 replies - 1 through 2 (of 2 total)

  • Where did you find the file? I’m having the same issue but can’t find a thing! Thanks.

    Thread Starter teresawatts

    (@teresawatts)

    I found it in the theme directory, a php file. It could be anywhere though. From what I read most of these files have ‘eval…’ in them a lot (did in the one I found), so maybe you could just download the folders with less strong permissions, do a search for that term and compare it to a clean version of WordPress to see where it’s coming from?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Removing GReader RSS spam’ is closed to new replies.