Sucuri site check tells me that my site is infected by malware.

ISSUE DETECTED DEFINITION INFECTED URL SEO Spam MW:SPAM:SEO?sb http://mywebsite/about/ ( View Payload ) SEO Spam MW:SPAM:SEO?sb http://mywebsite/2013/bad-times-for-home-owners/ ( View Payload ) SEO Spam MW:SPAM:SEO?s http://mywebsite.com ( View Payload )

Screaming Frog tells me that mywebsite.com/about is permanently moved (301)

Any idea how to fix this?

closed as off-topic by vancoder, fuxia Oct 14 '15 at 1:28

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 2 down vote accepted

The best way to fix this is to have a clean backup of your site's files and database and set up a fresh wordpress installation. Change all passwords related to the site (hosting, domain etc.), close your current hosting account, set up a new one, and let your host know your site was compromised so they can make sure it hasn't affected other sites on the server.

That's plan A. In case you don't have a backup... Spambots usually add a code snippet to one of your theme/template files. They're usually pretty benign - so if you find the snippet and delete, and then proceed with changing all your passwords, things might be ok. Common places are header.php, footer.php, functions.php, index.php - and if you can't find anything fishy there then proceed with the rest of the template files.

If you find it, eliminate it, and the hack comes back in a week... that's a real problem.

For next time, always use strong passwords, use a security plugin (I prefer iThemes Security), and always have a clean backup stored on a different server than your site is on.

  • As Benjamin mentioned, "the hack comes back in a week". This is why you should use trusted resources (themes/plugins) and keep them updated. If you have custom stuff in place, make sure it is maintained by somebody that has a decent level of php/wordpress security in mind. Rare cases would be the fault of the host. – Gabb3 Oct 14 '15 at 6:58

Not the answer you're looking for? Browse other questions tagged or ask your own question.