Weird Pages Being Created in My Website

I was looking in GWT and noticed my one site had quite a few pages that were not found. After looking into it a little I have noticed somehow pages are being created, and live on my website that I did not create and they are not anywhere in my WordPress dashboard. I am thinking maybe the site was hacked and somehow someone is creating these pages (even though I do not see how it would be benefiting them).

One example is the page:

xxhttp://www.mobilecasinolisting.com/index.php?Keywords=Las+Vegas+Hotel+Discounts&searc h_type=popularCategories&cat2=Las+Vegas+Travel&r=c %3EcX%3AjbXymZ3G%7BbX6wcHm%7BeHmv%5Bz6kc31%3E%27f% 3Evt%3Cvt%3C%3A%3C2%3C2%3C%3A119955%3Ctuzmf2%60%3A %2Fdtt%3C3%3Cjoufsdptnpt%60bggjmjbuf%604%60e3s%60e fsq%3Cusbggjdcppn%3Cusbggjdcppn%3C%3C3221%3Chbncmj oh%3Cmjtujoht%3Czbipp%3C%27jqvb%60je%3E23bb9b98feb 5d65f545dbfbg9f1g5%3A69%27enybsht%3Ebgf4%3A6%3Abg8 %3Ae%3Ag5d756f9175g5362995&rd=1

Which is exactly like my homepage, just has all that junk behind it. There are probably 10 or so of these pages like this. So how do I get rid of these pages (since I cant delete them from within the dashboard) and how do I make sure future pages are not created.

Thanks for any help.

Travis

I had exactly the same problem. One of my Wordpress sites was hacked. I discovered it the same as you in GWT. When I went back to the site and looked at Wordfence some files had been changed. I did a deep scan and identified a few new files, and also an admin user had been created. I deleted everything I could find and made sure that I updated to the latest WP release and all my plugins were up to date. Did another scan and everything came back clean.

Google then slapped a manual penalty on my site which they removed once I had demonstrated that I had cleaned everything up.

Make sure you create a new admin user, don't use Admin and use a really strong password. Get rid of plugins you don't use and make sure you use something like Wordfence.

You may have to reinstall Wordpress to get rid of the infected files or manually delete them in FTP and copy new versions across.

It's hacked than. There's a thread about it here on GPWA-forum! The sad thing is that some of the brands you're promoting are among the biggest sponsors of the people that are doing this...

You should get a subscription to sururi.net. They have yearly plans and they will back up and clean your site. They also do daily malware scans.

Quote:

---

Originally Posted by Triple7

The sad thing is that some of the brands you're promoting are among the biggest sponsors of the people that are doing this...

---

What do you mean by that? I dont get how it would help the brands. Actually I do not understand how it would help anyone other than hurting my website.

Do you have seo by yoast plugin??
And also, I suggest that you hide your loginpage so it won't be easily accessible for hackers.

Quote:

---

Originally Posted by sampendleton

Do you have seo by yoast plugin??
And also, I suggest that you hide your loginpage so it won't be easily accessible for hackers.

---

The SEO by Yoast plugin is a secure plugin that is updated often. I use it on numerous sites and have never had an issue with it.

I use Wordfence and a long, secure password and have not had any issues. The key is to update WordPress, themes and plugins as soon as updates are released. Cheap, unreliable hosting companies can also pose a security threat, especially if you're using cheap shared hosting.

Quote:

---

Originally Posted by TravG

What do you mean by that? I dont get how it would help the brands. Actually I do not understand how it would help anyone other than hurting my website.

---

Thread

Wordfence is a must have for any website running off wordpress. Make sure you download the free plugin and set it to email you warnings whenever something changes. https://wordpress.org/plugins/wordfence/

Good Luck

Quote:

---

Originally Posted by Puma

Wordfence is a must have for any website running off wordpress. Make sure you download the free plugin and set it to email you warnings whenever something changes. https://wordpress.org/plugins/wordfence/

Good Luck

---

Thanks - you are the second person who suggested that plugin so I am going to install it now! Thanks again

If I may also suggest setting your mobile device so you receive alerts ( mine is set for each new email ) so even on the go you can protect your site. Best of luck on your site :)

This thread came to mind...

Wordfence - Do you need the paid version or the free does the work

Quote:

---

Originally Posted by MMM

Wordfence - Do you need the paid version or the free does the work

---

Curious about this myself. I installed the free version and see the premium is $39/year. Is it worth it? Do you need premium?

I like these sites

Which site is most helpful?