How to fix my Joomla website with malware/virus

Discussion in 'Joomla' started by secretsau, Feb 21, 2013.

  1. #1
    Hi,

    My website currently has joomla running. After about 30sec-1min on the homepage the website redirects to another website via linkbucks advertisement. How do I get rid of that ?? Anyone had a similar problem?

    Thanks.
     
    secretsau, Feb 21, 2013 IP
  2. amritdhakalad

    amritdhakalad Member

    Messages:
    86
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    40
    #2
    Can you PM me the link to your website?
     
    amritdhakalad, Feb 22, 2013 IP
  3. TayneC8

    TayneC8 Active Member

    Messages:
    139
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    80
    #3
    If you were to change the theme on your website, does your Joomla still redirect? If you'd like, PM me the address and I can help you.
     
    TayneC8, Feb 22, 2013 IP
  4. secretsau

    secretsau Active Member

    Messages:
    402
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    58
    #4
    PMs sent. Thanks
     
    secretsau, Feb 22, 2013 IP
  5. Rankx

    Rankx Active Member

    Messages:
    119
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    50
    #5
    Most likely there is malicious code in the template. I've fixed issues like this before.
     
    Rankx, Feb 24, 2013 IP
  6. Jean-Pierre Hauet

    Jean-Pierre Hauet Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #6
    I have the same problem with a web site based on Joomla. A visitor cannot stay for more than 30 s on the same page before being redirected.
    Any idea ?
    Pedrojuan 92
     
    Jean-Pierre Hauet, Mar 10, 2013 IP
  7. Rankx

    Rankx Active Member

    Messages:
    119
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    50
    #7
    Like I said, the code is probably in the template. Let me know if you would like my professional service to sort it out for you.
     
    Rankx, Mar 10, 2013 IP
  8. Jean-Pierre Hauet

    Jean-Pierre Hauet Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #8
    The problem is now fixed. Malicious code had been injected in the index.php file.
     
    Jean-Pierre Hauet, Mar 11, 2013 IP
  9. Rankx

    Rankx Active Member

    Messages:
    119
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    50
    #9
    Right. You're gonna find those issues in the template file. Just an hour ago I removed some malware from the index.php file.
     
    Rankx, Mar 11, 2013 IP
  10. creativewebmaster

    creativewebmaster Active Member

    Messages:
    654
    Likes Received:
    7
    Best Answers:
    4
    Trophy Points:
    78
    #10
    There will be some code inserted into the files. Open the all the files and remove that code manually.
     
    creativewebmaster, Mar 12, 2013 IP
  11. VideoWhisper.com

    VideoWhisper.com Well-Known Member

    Messages:
    330
    Likes Received:
    6
    Best Answers:
    2
    Trophy Points:
    113
    Digital Goods:
    2
    #11
    - backup everything
    - upgrade to / reinstall latest joomla version
    - upgrade all extensions
    - scan all computers you used to connect for trojans and viruses
    - change passwords (for hosting and joomla)
    - scan your site using ClamAV from time to time (have your host install it if not available)
    - get rid of any plugins, scripts or other files you don't really use on the server
    - check scan/report sites and services, fix what they find and report the cleanup so your site doesn't get banned/blocked in search engines and browsers

    http://www.google.com/safebrowsing/diagnostic?site=yourdomain.com
    http://www.unmaskparasites.com/
    http://siteinspector.comodo.com/
     
    VideoWhisper.com, Mar 28, 2013 IP