Hello, Please advice how to find and remove a malware that redirrects to other pages, when clicking on some of my links on google search. When i search my site on a google search, i get some weird names and links, Etc: www mysite com/?category=44&watch=381 Title: Movie Others, The Download And when i click that weird link on google search im getting retirrected to popmovz.com (my site is not related to movies at all) And when i click on "Catched" by google on that my sites link, i see there on a catched page a lot of weird texts about movies with some links, besides normal content. But when i copy that link www mysite com/?category=44&watch=381 and paste to browser im not redirrected to that other movie site but getting to a "page not found". Please advice what to do, Thanks a million!
This kinda of hack is generally hidden in two places: .htaccess or inside your PHP files (generally index.php). Look at both files to see if they have been modified lately... If you can send your site name, I can give you more info (or you can try this link for more info: http://sitecheck.sucuri.net ). Thanks, -- Malware removal: http://sucuri.net
I do not know actually is it a malware, as long as nothing found using that link you provided me, Ddmd, Also i checked those files .htaccess and inside PHP files and havent found any recent date that was edited. Could it be that the problem is in a sitemap (i recently used an application to generate and upload sitemaps) or maybe in mysql database? Strange but i do not see and never haven't seen this problem in my pages but i see in "google catched" version, the last update of catched pages was a couple a days ago and the problem is still there Please help anyone
go to Run>type"cmd">in cmd type "ipconfig /flushdns" and then try googling, it maybe malware on your local computer poisoning your DNS cache.
Thanks for your reply, Mikeasro, just jone what you suggested, still the same. Another thing - i see in my traffic analytics that people arrives from searches about movies to my site
things to look for are, each file specially the index files, go to the end or the top of code, and look for lines of code that does not belong there, second thing to look at are .js files or even php files that do n to belong in your file structure, sort your files by date and look at the latest date, easy way to find these files..... third thing to look for is base64 codes, these can be either in a random file, in a config file or index files, code looks something like YTM0NZomIzI2OTsmIzM0NTueYQ==) it needs to be removed. last thing to look at is SQL injection, if they hacked into your database, then your database needs to be looked at.
Thank you for your reply, Submitmaster, I was trying to look at the files and haven't found any recent modifications maybe in MySQL base then. But what to look for in mysql? i've tried to look for some keyword like "movie" but havent found anything related to this there The strange thing that there is no weird texts in real time, it is only in google search and google catched pages. (in fresh catched pages also - a day or two old)