Need help I think my server is hacked

3 replies
I have this code being added to all my sites on the server <?php eval(gzinflate(base64_decode( its much larger but how do I stop it and clear it out. Also what does this code even do?
#hacked #server
  • Profile picture of the author RobinInTexas
    Originally Posted by blitz20 View Post

    I have this code being added to all my sites on the server <?php eval(gzinflate(base64_decode( its much larger but how do I stop it and clear it out. Also what does this code even do?
    Hackers have managed to gain access to your site. The code is likely malicious and may infect site visitors or it may allow the hackers to access your site by installing back doors.

    You need to find all changed files and remove the code.

    If you have a WordPress site there are some plugins that will help find and or remove the code.

    Sucuri Security Has an online checker that may or may not be helpful depending on what it finds.
    Signature

    Robin



    ...Even if you're on the right track, you'll get run over if you just set there.
    {{ DiscussionBoard.errors[9090209].message }}
  • Profile picture of the author Kingfish85
    Originally Posted by blitz20 View Post

    I have this code being added to all my sites on the server <?php eval(gzinflate(base64_decode( its much larger but how do I stop it and clear it out. Also what does this code even do?
    I would recommend that you contact your web host and have them investigate.
    Signature

    |~| VeeroTech Hosting - sales @ veerotech.net
    |~| High Performance CloudLinux & LiteSpeed Powered Web Hosting
    |~| cPanel & WHM - Softaculous - Website Builder - R1Soft - SpamExperts
    |~| Visit us @veerotech Facebook - Twitter - LinkedIn

    {{ DiscussionBoard.errors[9090266].message }}
  • Profile picture of the author Paul Gordelo
    First of all put your website in maintanence mode and then scan your website using wordfence security plugin which will tell you all files which are infected.
    Signature
    {{ DiscussionBoard.errors[9106951].message }}

Trending Topics