Hidden conditional redirect

I took over a Wordpress website for a client that had a hidden conditional redirect placed on it. So that all search engine listings get redirected to a spam site. I did the standard and looked in the htaccess, index.php and scanned the the SQL database for and redirect codes and came up with nothing.

A big problem is the client has some very bad hosting/Dreamhost, on the regular ftp the htaccess doesn’t even show up, I have to use the “Webftp” to get to it and the search tool dosn't work to look for other htaccess files that might be hidden in the site.

So I am wondering-
-Is it a possibility that other htaccess files are on the host that I cannot see client side ?

- Is it a possibility that DNS files can be infected with the redirect that I cannot get to client side ?

-And how many places can a redirect be hidden ? Can it be hidden in javascript ? Cloaked in a non readable code ?

When clients show up with bad hosting I have them deal with all hosting problems and recommend good hosting. I told the client to contact Dreamhost and ask them to look at ALL htaccess files and DNS files 4 days no reply(as usual Dreamhost sucks)

 

Hello,
First, the FTP client that doesn't see the .htaccess file is probably hiding it because files that begin with a dot (.) are SUPPOSED to be hidden. There is likely an option that you can set in the FTP client to show "hidden" files that begin with the dot.

As for the redirect, I doubt that there is another .htaccess file causing this. It is likely that the Wordpress install was hacked and code has been added to the files themselves or to the database. Do you have SSH access for this account? Sometimes, it is easy to find by listing files by modified date. Look in the wp-content, includes, and themes directories in particular. The code may use the PHP function eval() or base64_decode()to hide itself but will usually appear at the top or bottom of the infected files.

 

Thanks Tier_net - You nailed.

It was a PHP function eval(base64_decode in a bunch of wp-content/plugins/- files