Title: Malware Issues
Last modified: July 21, 2023

---

# Malware Issues

 *  [OscarGuy](https://wordpress.org/support/users/oscarguy/)
 * (@oscarguy)
 * [2 years, 11 months ago](https://wordpress.org/support/topic/malware-issues-4/)
 * I ran a malware scan on the site and got the following result on several pages:
 * Malicious
   Reason:Spam/SEO injection detectedDetails:Detected malicious SPAM/SEO
   contentOffset:110Threat dump:View codeFile size[byte]:125967File type:HTMLMD5:
   C9CE1D1FFCE9E4EA109291B402D05157Scan duration[sec]:3.054
 * Then I looked at the code and it was this:
   [[<a href=”[https://ofcs.org/category/weekly-updates/the-grab-bag/”>Video](https://ofcs.org/category/weekly-updates/the-grab-bag/”>Video)
   Essays %26#038; Reviews</a&>It seems like every ampersand on the site has been
   replaced with that %26#038;I thought at first it was just a &; code, but I’ve
   never seen one with a # in it and certainly never with a %26. I also noticed 
   that other things like emdashes were also being replaced. So, I assume there’s
   a .php file somewhere that’s causing these to be inserted, but I have no idea
   which and how to find it.
 * We’re in the middle of trying to migrate because our SSL expired and the site
   we have now wants to charge us for it, but the site we’re moving to doesn’t. 
   The new site won’t let us migrate with the presence of malware, so I have to 
   figure out some way to fix it.
   Does anyone have any ideas?
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fmalware-issues-4%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 1 replies (of 1 total)

 *  [MilesWeb](https://wordpress.org/support/users/milesweb/)
 * (@milesweb)
 * [2 years, 11 months ago](https://wordpress.org/support/topic/malware-issues-4/#post-16911387)
 * You would have to consider performing a scan on your account which would locate
   such files. If it is your own server, installing Monarx OR Bitninja should help.
   Re-installing WordPress core files would remove the unwanted files if any. If
   you are unsure how to do it, please take the help of a professional.

Viewing 1 replies (of 1 total)

The topic ‘Malware Issues’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 1 reply
 * 2 participants
 * Last reply from: [MilesWeb](https://wordpress.org/support/users/milesweb/)
 * Last activity: [2 years, 11 months ago](https://wordpress.org/support/topic/malware-issues-4/#post-16911387)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics
