The site is Videos-de-musica.com it is a simple wordpress blog with music videos. Somehow the subdomain stats.videos-de-musica.com filled up with spam, I remember setting the domain for pwiki stats, but then uninstalled it and I don’t remember what happened to it.
This is an example spam page stats.videos-de-musica.com/aal-0exe.htm
When you search PRINTABLE SUPERMAN EMBLEM BATMAN on Google that is the first result, and when you access it you are redirected to a “Google has found malicious software may be installed onto your computer if you proceed” scam site.
I have tried disabling all the plugins with no change.
Does anybody know what happened and how to remove this?
I am downloading all the site directory to search for any clues.
Thanks.
You probably downloaded a theme or plugin that added a “backdoor.” Otto has a good post on the subject: