Loaded Commerce Community

On our site SHO Source it seems our search function has been hacked. When you do a search and click on the item it takes you to a spam site. How would this be fixed and what happened to cause this? Thanks.



*edited by moderator (if your site was hacked and infected, please do not post a link to it until it's fixed, because it then might infect whoever clicks on your link)

Hey,

Unfortunately there is no straight forward procedure to clean a website from malicious code uploaded under it. I will give you some sample steps you might try in order to rectify what has happened.

1. Create an archive of your web site files and download it locally to your computer.
2. Scan them using the latest update for your anti virus software and let it clean the corrupted files.
3. Remove the files from your website and replace them with the ones you have just cleaned.
4. Make sure all your scripts are updated to the latest release. If not - update them asap.
5. You might want to check and remove any additional contributions you have added and that you are not certain that are absolutely safe.

Hope this helps.

You can also search the code for code <iframe this is the most common method used. If the iframe is found check the url being passed to iframe.

You can also check actual request being sent when page is browsed via firefox plugin (firebug). Once you find the url you can easily detect and remove it.