Hello,
My website have been hacked. I followed guides to clean it, it looks good now, except one thing.
I noticed in my server logs that some weird pages are crawled, I gave one in example, in the “link to the page I need help”. The thing is, if you replace mds.php by anything.php, it will display these japanese pages.
I tried to remove all plugins and themes, and these pages are still accessible.
The main things I did to clean the hack, which solved all my other issues :
Reinstall wp-admin and wp-includes.
Remove all unknown files and folders
Reinstall all plugins and theme with latest version (removing the folders from my website and installing with files downloaded from wordpress)
Changing all my passwords (admin, database, ftp) and no other admin users
Changing key salts
Thank you
The page I need help with: [log in to see the link]