Mobile app version of vmapp.org
Login or Join
Cooney921

: Google searched links (to a site I administer) are redirecting users to fake websites I'm quite stumped here as I am not an expert when it comes to scripts.. Some users, searching for a product

@Cooney921

Posted in: #Malware #Security #Spam #Trojan #Virus

I'm quite stumped here as I am not an expert when it comes to scripts..

Some users, searching for a product which my website provides, get presented with genuine links such as "https://www.brewcraft.co.za/index.php/latest-promotions/205-new-alembic-pot-still". However, when they click on the link, they are redirected to some fake pages (which seem to differ all the time).
This site has also been plagued by issues where spam has originated from it..

I have found some index.php files have been given permissions of 755 and suspicious scripts in them such as:
366b1/
@include "x2fhox6de/x62rex77crx61f/x70ubx6cicx5fhtx6dl/x70lux67inx73/fx69elx64s/x72adx69o/x66avx69cox6e_4x33dfx628.x69co";

/366b1/

I am not the host of the site and only have cpanel access.. what can I do and where can I look/scan for this

I have tried most free website scanners but they all show negative infection.

I have the latest Joomla version and all my plugins are up to date.

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Cooney921

1 Comments

Sorted by latest first Latest Oldest Best

 

@Goswami781

It sounds like the website might have been hacked in the past and never got the proper cleanup done.

Firstly, login to your Google Webmasters and see if there is any infection warning from Google. And based on what you have written, it will have some message.

And then cleanup can be done in many ways. Find if there is any website file scan plugin for Joomla and do a complete scan. If you can't find then you may like to install WordPress in a separate folder and there are number of scanning plugins available, you can install that in few minutes and do a complete root (/) scan.

And then look into the scan report and delete or clean any infected files.

Note: You need to have knowledge about code and ability to identify normal vs infected codes etc.

Also, there is one simple method, download your entire site and run anti-virus scan but it may not detect all infections.

Hope this will help you.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme