Welcome to the Q&A Forum

Hi Ankit, I already mentioned the files that were changed in our case: header.php, functions.php and some entries in DB. Here are some links for step by step malware removal (don't depend on plugins for malware removal entirely) http://securepress.org/tutorial-how-to-remove-malware.php https://www.optimizesmart.com/malware-removal-checklist-for-wordpress-diy-security-guide/ http://hasibul.info/blog/2015/11/25/how-to-remove-malware-from-wordpress-sites/ I hope this helps if the problem persists then contact me again. Regards, Vijay

Yep, it's a big, tedious task, but there are no shortcuts here to do it right.

.htaccess file has nothing but BEGIN WordPress <ifmodule mod_rewrite.c="">RewriteEngine On RewriteBase / RewriteRule ^index.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L]</ifmodule> END WordPress Installed Plugins Yoast SEO, Google XML Sitemaps, Akismat, Udinra All Image Sitemap, Social Share Bar (Digg Digg Alternative), Jetpack by WordPress.com, AuthorH Review. Apart from Yoast, it seems nothing can block site, and Yoast settings are fine, just disabled tag indexing & subpages along with author archive. Problem is something else I guess