What is the malware on the site?

Question

SMTP

Hello! There was a website (Wordpress), it lived normally, everything was ok, then it was necessary to move to another hosting, moved it, everything is standard and immediately after the move, if you write a letter in the contact form, then this is what comes:
from: � 斝夹秆 傃<€懈泄[email protected]> via web403.default-host.net
[email protected] is the real sender address from the site, which is � 斝夹秆傃 <€懈泄.
is added to each sender itself .... the only thing that was done on the new hosting was ssl fastened and that's it.
checked the site:
1) virustotal.com
2) AI-Bolit
3) with all sorts of scanners for malware ...
4) uploaded files from the backup that worked on the previous host and ruled
where else to dig?
Thanks
SOLUTION: https://archive.codeplex.com/?p=encodingchecker

Answer 1

The problem with the encoding, no need to dig anywhere. It is necessary to set the same encoding everywhere and there will be world peace, etc.