Hacked sites

Portal Home > Knowledgebase > Articles Database > Hacked sites

Posted by Jon12345, 10-06-2011, 12:03 PM
I have a couple of my sites hosted with GoDaddy and just received an email from them saying they have malware. When I go to them, I get a browser warning that they are malware infected. So, I haven't actually viewed the page yet for fear of being infected. But if I can't view the page because of that, how can I see what is wrong? What would you do? Thanks, Jon
Posted by khunj, 10-06-2011, 01:46 PM
Download it :
Posted by Jon12345, 10-06-2011, 02:32 PM
Sorry, but that means nothing to me.
Posted by lynxus, 10-06-2011, 02:34 PM
he means if your running linux just download the page and look at the source. Do you have ftp access? if so, go to it, Download the site to somewhere and look at the sourcecode.
Posted by pmabraham, 10-06-2011, 02:35 PM
Good day, Jon: First make sure your own personal computer system is protected (anti-virus, anti-malware, anti-spyware, etc.) and up to date. Then FTP the file(s) in question, and view the source code. Thank you.
Posted by webhostgeek, 10-06-2011, 03:56 PM
Also check your htaccess file. Sometimes hackers access it to distribute malicious codes. Here`s a reference http://redleg-redleg.blogspot.com/20...r-malware.html
Posted by ssfred, 10-07-2011, 04:18 AM
This type of issue happens due to injection of malware into the files. It can either be due to a virus attack through an infected machine which is used to upload web contents to the site or due to some vulnerabilities with the installed application. Please make a scan with the updated ant-virus on your machine. Also change the cpanel password to a more secure one and avoid keeping them on any of the application like ftp client or browser.
Posted by HostAdmins, 10-08-2011, 02:48 AM
Jon, Ask GoDaddy's support to run LMD in your accounts and perform a security audit. Make sure to clean your PC as well with any good antivirus software.
Posted by ssfred, 10-08-2011, 04:17 AM
Make a detailed investigation for the malicious string in your public_html. Once the files are detected, remove the string and check the logs to identify the source of attack.
Posted by caisc, 10-09-2011, 01:28 PM
Sometimes Google shows such warning msg when you have set up a link on your page that points to another webpage that has malware or any threat. Few of our clients faced such issue and once they removed the suspected links everything was fine in just 2 days, So if you have many hyperlinks on your site/page inspect them also.