shawnalize

Here are a few pointers, excuse me if they’ve been pointed earlier. But be sure to check for malicious code in your htaccess file, that’s where hackers include malicious code. Also be sure to check top of your index.php file, I found some legit ‘looking’ code there which was actually malicious. More can be found here:

https://www.getastra.com/blog/911/how-to-remove-pub2srv-malware-from-your-wordpress-opencart-website/

My website was infected with this pub2srv malware last week. There were advertisements showing up and what not. I did managed to remove some fishy looking websites myself but then this kept on coming, had to take some professional help in the end.

This link had helped me, looks derived from this thread itself:

https://www.getastra.com/blog/911/how-to-remove-pub2srv-malware-from-your-wordpress-opencart-website/