How to find wordpress spam file?

Question

Information Security

Blocked wordpress site due to spam. I checked the site with this utility https://revisium.com . I got the following result https://yadi.sk/i/YtWcoTnT3TRWzG
However, there is no such file in the specified directory https://yadi.sk/i/zeYjioxO3TRX55
Tell me how to find the malware?

Answer 1

Contact the hoster, let them provide you with logs, or dig them yourself if the server is yours.
Look for left, atypical files, in the root, in plugin files, in the theme. Check the main files, the code is sometimes embedded at the beginning or end, somewhere on the right, which does not fit in the editor window.
Archive the site, check it with the DR.Web file pathologist, the weight of the uploaded files is small, so, most likely, you will have to make archives by folders.
Well, actually, you need to look for a leaky plugin, as a rule, all the evil is in them, not to mention WordPress itself as an all-embracing evil