WordPress Bieber-Video Virus?

I’m afraid it’s possible that your site has been hacked. ??

Have you tried:

– deactivating all plugins to see if this resolves the problem. If this works, re-activate the plugins one by one until you find the problematic plugin(s).

– switching to the default theme to rule out any theme-specific problems.

– resetting the plugins folder by FTP or PhpMyAdmin. Sometimes, an apparently inactive plugin can still cause problems.

What happens if you use another browser? Or another computer?

Problem happened to me also . Find a piece of code in a plugin

[Code moderated. Please do not post hack code blocks in the forums. Please use the pastebin]

Search for it and remove it .

I removed it and problem is gone . It happens mainly in free or nulled plugins.

That is not sufficient. You need to completely de-louse the site as explained above. The plugin may not be the vector – but just a symptom of the hack.

@siddhuarevindh Which plugin was it and what file?

Thanks!

@siddhuarevindh
Your post is edited. Can you show the piece of code in pastebin, please?

I have found it via MultiFound, search for the “spamcheckr.com”

It happens to me too @siddhuarevindh can you please post the code properly?

@sem8seo ,,@rbs250 ,@user45 https://pastebin.com/2AXAiWCy check here

Best way is to open all .php file in plugin Notepad++ and search for spamcheckr.com

For me, it appeared at includes/settings.php with a famous form plugin. I commented out this line and problem is out.

That is not sufficient. You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

When this happens why not just delete “all” WordPress install files, re-upload them and do the same for all Theme and plug in files….

You don’t need to open each php file. Just use Folder Find Text (Russian only) or SearchMyFiles – programms that allow to search text inside folders. You need to search spamcheckr.com link.