Help Finding Hacker Malware

by 8 replies
10
Hello,

Unfortunatly all of my websites was hacked some time ago and i still have not found the redirect code that the hacker implemented to redirect all of my websites to a website called Gafa-pro.ru

I have installed a plugin called bulletproof sequrity and that helps my sites from being redirected by creating a new htaccess file but the code/malware is still somewhere in the files.

Is there anyone here who knows how to locate this hacker in my files - I actuall don't know where to look anymore

Annette
#programming #finding #hacker #malware
  • Hi,

    Did you look if there was a meta redirect in your header?
    Also try to disable JavaScript in your browser. If you don't get redirected then it's some JS code somewhere that's executed when the page loads. If you do get redirected with JS disabled then it's most likely a meta redirect.

    Seb.
  • I disabled Javascript and nothing happend.Any idea on what code to seach for in the header.php?
  • It doesn't have to be in the header if it's a JS redirection.
    A typical JS redirection would look like this:

    Code:
    <script type="text/javascript"> 
<!-- window.location = "http://www.google.com/" //-->
</script>
    So have a look at the source code of your page once it is loaded and search for something similar.
    Searching for the word "location" should help you find it. Then you'll have a confirmation it's a JS redirection and maybe that'll give you an idea where it is.
    • [ 1 ] Thanks
  • Hi Annette,

    Look for a free site scanner online and run it. Its likely that searching for the url wont work as it will be encoded. Once you find a file with the offending code in it you can search all of your files for that offending string of code.

    There are a number of free site scanners online and I use them on all of my hosting accounts as you can easily identify the files that have been hacked.

    Cheers

    Chris
    • [ 1 ] Thanks
  • Hi Annette .. whats the website address ?
  • Hi,

    I got all my websites hacker free 2 days ago with the help of a great guy at Bluehost support
    • [1] reply
  • One free online scanner is Sucuri SiteCheck - Free Website Malware Scanner
Join the discussion

Next Topics on Trending Feed

  • 10

    Help Finding Hacker Malware

    Hello, Unfortunatly all of my websites was hacked some time ago and i still have not found the redirect code that the hacker implemented to redirect all of my websites to a website called Gafa-pro.ru