Wordpress internal path: /home/amrithd/public_html/zappiertech.com/wp-content/themes/TheProfessional/index.php
WordPress version outdated: Upgrade required - Note that any PHP, JS or .htaccess could be compromised by this type of malware.
The location line in the header above has redirected the request to: htxp://mercurytutors.com/stats.php
Content returned: 1: No input file specified.
This is important information from sucuri:
http://labs.sucuri.net/?details=mercurytutors.com URLs and sub domain distributing the malware or acting as a redirector,
found as
http://labs.sucuri.net/db/malware/malware-entry-mwhta7attack uses the .htaccess file to redirect users to a site serving malware (or spam).
In some cases, the index.php is also modified to do the redirection as well
polonus