If you like DNray Forum, you can support it by - BTC: bc1qppjcl3c2cyjazy6lepmrv3fh6ke9mxs7zpfky0 , TRC20 and more...

 

Malware Displaying on My Site Instead of Content

Started by jeyavinoth, Aug 13, 2024, 12:33 AM

Previous topic - Next topic

jeyavinothTopic starter

I'm having a big problem with the site citеta.аn. Rather than showing the actual content, it's just displaying a bunch of garbage instead. I'm not sure how to fix this issue... I've checked all the files on the site and even searched through everything on my computer. I found this new article online that suggests I might have some malware infecting my system.

But here's the thing: it's not the device I'm using (we tested it on four different gadgets!!!), which implies that those jerks have inserted something into the code of my site! Meanwhile, every other website is functioning properly.

I really need some help to sort this problem out.
  •  

amiejemner

It's important to rule out any possibility of malware on your server, even though you've checked your devices. Sometimes, those types of threats can insert themselves directly into the website code or database if your site has been compromised.

Here's what I suggest you do to troubleshoot this issue:

1. Check Your Files: Since you've already looked at the files, ensure you pay special attention to the index.php or other main files that load the content. Look for any unfamiliar code or obfuscated scripts that don't belong there.

2. Database Integrity: Check your database for any unusual entries or changes, especially in tables related to your content. If your content is dynamic and pulled from a database, it could be corrupted.

3. Backup Important Data: If you haven't already, back up your current files and database before making any changes. This way, if something goes wrong, you can restore it easily.

4. Inspect External Libraries: If your site uses external JavaScript libraries or frameworks, sometimes they can be a backdoor for some issues. Make sure those are up to date and haven't been injected with malicious code.

5. Security Plugins: If your site is running on a CMS like WordPress, consider installing security plugins that can scan for malware and vulnerabilities. Plugins like Wordfence or Sucuri can be very helpful.

6. Server Configuration: Check your server logs for any unusual activity. This can help you identify whether this was a targeted attack or if it coincides with some updates you might have made.

7. Update Everything: Ensure your website's CMS, themes, and plugins are all updated to their latest versions, as outdated versions can have vulnerabilities that attackers exploit.

8. Consult Your Hosting Provider: Since you've confirmed that it's not your devices, reach out to your hosting company. They might check their end for issues and offer further assistance in scanning your site.

9. Consider a Professional Audit: If the issue persists, you might want to hire a professional to perform a security audit and thoroughly examine your site's code.

10. Monitor Traffic: There could be unusual traffic that leads to your site being flagged or tampered with. Use analytics tools to monitor traffic patterns closely.
  •  

Shalliatrig

You might have recently added a new theme or a plugin to your WP site.

It's likely that your website itself isn't the one that got compromised, but rather the source of those questionable links, like admarkefsetlocation.com:

http://statistic.admarkefsetlocation.com/for/hos?l1/wp-content/themes/Nicol/style.css

When you try to access these links, it usually results in a redirect. This means that you could eliminate these redirects simply by removing the links that point to admarkefsetlocation.com.

Now, where did those links come from...? Maybe you accidentally included them while installing a plugin, or perhaps someone else did it, or it could even be that the originating site added junk links that are now affecting you. So, it really leaves us questioning the source of these unwanted redirects. Keeping your site clean is paramount in avoiding these inconveniences, so regularly check and audit your plugins and themes for any suspicious activity.
  •  

Dorothy

It may be possible that they are using a SQL injection, which is a common method hackers use to exploit vulnerabilities in a database.
Also, without a backup of the website, it's like sailing on a ship without a life jacket. You really must create and store backups regularly to protect your data and work. It's vital to ensure that there's always a restore point in case something goes wrong.
  •  


If you like DNray forum, you can support it by - BTC: bc1qppjcl3c2cyjazy6lepmrv3fh6ke9mxs7zpfky0 , TRC20 and more...