Need solution for virus infected website?

Discussion in 'Apache' started by neiljhonson, Mar 9, 2009.

  1. #1
    I have one website, which is developed in php. In this website, we use admin section to update website content and header files...........but it got infected some kind of WS virus........it generate...........www.xyz.com/ws/abc.php kind urls........these urls are cached in google and looking like website pages. But there are no page in hosting.

    do you have any solution for this. Please let me know to remove it.

    thanks in advance
     
    neiljhonson, Mar 9, 2009 IP
  2. kkobashi

    kkobashi Peon

    Messages:
    41
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #2
    What makes you think its a virus? 90% of the time its faulty setup, problem in your programming, the way you setup your content management system, or the .htaccess file has rewrite rules in it that are incorrect. Also, how do you know if those pages actually did exist before and were accidentally crawled?

    You cannot get rid of pages in Google. You can only tell them it no longer exists or has been moved to a different, unique URL location. In most cases, you can do a 301 redirect to the new, correct URL signature via .htaccess and mod_rewrite.
     
    kkobashi, Mar 11, 2009 IP
  3. AquariusRyan

    AquariusRyan Peon

    Messages:
    109
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    To point something out, you can put in a request to google under a domains webmaster tools to remove content from their listings however it can take from a week to a month before they get to your request.
     
    AquariusRyan, Mar 11, 2009 IP
  4. MayurGondaliya

    MayurGondaliya Well-Known Member

    Messages:
    1,233
    Likes Received:
    38
    Best Answers:
    0
    Trophy Points:
    170
    #4
    Also check your .htaccess file if there are any rewrite rules set that were not setup by you. If there are any unnecessary rules, then your website might have compromised.
     
    MayurGondaliya, Mar 12, 2009 IP
  5. boompie

    boompie Peon

    Messages:
    17
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    As others have said, it could well be .htaccess, but I would certainly turn that server inside out because it looks like things got hacked.

    Check /tmp, /root, /var/log/messages, last -a, history, ...

    If hacked, do reinstall the OS.

    Carl
     
    boompie, Mar 16, 2009 IP
  6. winnerz

    winnerz Well-Known Member

    Messages:
    3,325
    Likes Received:
    284
    Best Answers:
    0
    Trophy Points:
    155