Website Hacked

You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html
https://blog.sucuri.net/2010/07/understanding-and-cleaning-the-pharma-hack-on-wordpress.html

Thanks Jan,

Busy running scans with plugin from GOTMLS.NET – see if that resolves the issue. Thanks for all the information links. Appreciated.

Resolved

Hi Mike
I am experiencing the same problem. My web site https://www.minimoid.com
is automatically redirected to p.pw/badeil. I am using WordPress and Theme Fusion like you. Could you please share the solution?

Many thanks in advance

Albert

I have already solved the problem. The infected files were

./wp-content/themes/Avada/footer.php
./wp-content/themes/Avada/_wp-config.php

Hi Guys,

My web site https://www.lfoto.lt was hacked and automatically sending a spam letters. I am using WordPress and Snapshot theme By SiteOrigin. Could anyone say, how could I solve this problem?

Many thanks in advance

Odeta

@kletalt – There’s all sorts of different hacks out there. Some are relatively easy to clean, others are firmly embedded and require a complete server wipe to get rid of. It’s impossible to give specific information without positively identifying the hack.

Compound this with that you should never publicly share hack code – it’s free publicity for the hack’s author. Your best recourse is working through the resources Jan posted in the second post above.