WordPress forwarding/linking strange content

********** BACK STORY **********

Client calls and says they have a strange description of their site on google.

Sure enough, they're right. They whole description is about adobe software.

So, I started searching the content. To the point that i downloaded the entire public directory & pulled a sql dump. from linux cl, used both find & grep in attempts to find any word pattern.

adobe, best, price, etc.

I'm intentionally misspelling the domain name so this questions doesn't come up in google if its searched.
replace the numbers for vowels.

d3nt@lfixrx.c0m

********** HERES THE ACTUAL QUESTION **********

If from the home page, you click on the Home button (sometimes times the second click) - you will be sent to this adobe page. The url still says the correct domain name. Looking at the error console & network request - I can see that the requests are going to wp.com

I can't find the link in any css or js files. The <a href link is also correct.

Where could this problem lie ?? Please help experts.
To be clear, my question is about the Home button forwarding to the wrong site / pulling content from invalid site. What is the cause of this home button going to the wrong home page ?

Thanks in advance experts.
-steve
LVL 1
ImaginxAsked:
Who is Participating?
 
Jason C. LevineConnect With a Mentor No oneCommented:
The site has been hacked and there is code injected into one of the PHP files (probably a core file) that is causing the problem.  

Try following some of the basic steps in this article:

http://www.experts-exchange.com/Web_Development/Blogs/WordPress/A_10806-Recovering-From-and-Preventing-WordPress-Site-Hacks.html

But in all likelihood you will need a service such as Sucuri or StopTheHacker to step in and analyze the site for back doors and insecurities.
0
All Courses

From novice to tech pro — start learning today.