Joomla Templates Club 406,261 posts

[juremmm Friend juremmmJoin date: June 2010Posts: 23Downloads:0Uploads:0 Thanks: 9 Thanked: 1 times in 1 posts]

#164545

Hi,

the googlebot has discovered that my webpage is infected with a code:

<img heigth=”1″ width=”1″ border=”0″ src=”http://imgaaa.net/t.php?id=9154642″>

it appears at the end of each html – and there are hundreds of html files on the web page. I am removing this code manually. Is there any more elegant way to remove that code from all index.html files?

TIA

[mayuri_g Friend mayuri_gJoin date: May 2011Posts: 107Downloads:0Uploads:5 Thanked: 10 times in 11 posts]

#393858

Image source you provided is causing Reported Attack Page! so 1st check with proper url…

if still not working then let me know.

Which Image you are wanting to display? and on which page?

[juremmm Friend juremmmJoin date: June 2010Posts: 23Downloads:0Uploads:0 Thanks: 9 Thanked: 1 times in 1 posts]

#393866

<em>@mayuri_g 243840 wrote:</em><blockquote>Image source you provided is causing Reported Attack Page! so 1st check with proper url…

if still not working then let me know.

Which Image you are wanting to display? and on which page?</blockquote>

That piece of code is causing a problem! Namely in all Index.html files on my web page there has been this code written in by a virus. I do not want any image to display, I would like to erase this code (<img heigth=”1″ width=”1″ border=”0″ src=”http://imgaaa.net/t.php?id=9154642″>) to be deleted from all Index.html files.

Any idea how?

[mayuri_g Friend mayuri_gJoin date: May 2011Posts: 107Downloads:0Uploads:5 Thanked: 10 times in 11 posts]

#393868

can you send me url of your site and admin details on http://support.joomlart.com/index.php?/Tickets/Ticket/View/73565

[Phill Moderator PhillJoin date: February 2014Posts: 7013Downloads:40Uploads:77 Thanks: 917 Thanked: 2206 times in 1818 posts]

#393878

Sorry, but you will have to work through the files carefully finding the ones with the problem. It gets more difficult than that in fact, you will also need to scan your database for any entries that the hackers may have left behind and any files elsewhere the hackers may have dumped on your system. Not a simple task.

If you are on a linux server and are good with linux then you could use the logs to see exactly what has been attacked.

Or if you have a backup from before the attack you could restore to this.

I am guessing that some of your components or your Joomla install were not up to date hence the attack. Sorry to be the bearer of all the doom, you have your work cut out.

[Author]

Posts