Hacked Website - .htaccess Redirect

tmotion · Mar 9, 2012

We have a couple dozen sites on a shared hosting account. As of today, ALL of them have been infected with malware that rewrites the .htaccess file in such a way that if the site is accessed from any third party location like a directory or search engine, it redirects to a foreign site: [link removed]

For an example, you can look up one of the sites in Google here: [link removed]

(I've not had any trouble with malware downloading to my computer going there, but do be careful just in case!)

If we remove or modify the .htaccess file, the script just overwrites it again, but we can't find the location of the malware.

We're working with the hosting company to try to find a fix, but no dice as of yet. Does anyone have any suggestions that might be helpful?

Thanks in advance for any help anyone can provide!

JARED

TimW · Mar 9, 2012

How people write their website code, how old/unupdated the software they write it with, and how secure the servers that host it are really the areas to look at. Issues here are commonly referred to as code injection ( see: http://en.wikipedia.org/wiki/Code_injection ) The things we do in this forum are not going to find problems in your code. None of these malware scanners will since they are not design for this purpose.
You are going to need to have a very good webpage developer check the code for security issues and you need to verify that all software being used has been updated to include all security patches. In addition, you need to make sure that the server hosting the website also has been fully updated.

Log in or Sign up

Hacked Website - .htaccess Redirect

tmotion Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member