site suspended due to mass email

hi there,
today i got message from from my web hosting company that my site has been suspended
they asked me to remove mass email script from index.php
can you plz help me out.. i use wordpress and dont know anything about PHP
kindly help where to locate it and how to remove it...

it would truly mean alot thanks..

 

Maybe your account was hacked. Ask your hosting company for some help, or hire someone.

 

ask your host if he was born yesterday.... and then tell him to unsuspend you and limit your account to ZERO emails per hour until you have had a chance to resolve the issue.
Once the site is unsuspended, I can take a look. the first thing to check is that you have no contact forms without captchas. The second is that you might have a plugin installed inside of wordpress, which is simple, just go to plugins and deactivate.

If you dont have contact forms, AND if you haven't to your knowledge been actively using plugins in your site, then change your cpanel password, your wordpress password, and everyother password that you have.

Do what you can, and if you get stuck, contact me and I will see what I can do.

 

thanks for the great reply...
i contacted my web hosting and they unsuspended my site (http://www.technostop.net) you and i do have contact forms without captcha... and there is another problem, my site loads pretty slow.. how can i decrease its load time

 

You are using WordPress. So, it is recommended to use a caching plugin such as w3 total cache and configure it properly. It will give a better page load speed. Also optimize images, use gzip compression etc. There are more things that you can do to speed up your site.
Use google page speed test tool to get the recommendations.

 

thanks Dumindushalika for good suggestion

 

I really liked your answer.
@lionofdesert, Just be careful the next time you install plugins. Many are good. But many are not. Don't just install anything on your server.

 

All above are pretty solid tips, and pretty much right on point. Are you still having the issue or do you need assistance? The thing I would recommend even if your problem is solved, is have your current webhost check log files to see when this took place, because if you didnt do anything to cause this, more than likely your WP site was hacked. Very common, and well documented. Love WP myself, however there are security issues and your webhost should also take further action to help protect you from future hacks if that is indeed the case. Good luck!