Please help one more time.

[maindron1]

When someone goes to my website, there is an attack comming from my website to their computer and I figure that some hacker must have changed or added something to one of my webpages. If they did not add anything on the catalog/index.php what other files might have they changed?

 

Thank you.

[Guest]

Rodriguez,

 

There are several ways that a hacker could infiltrate your website. Some of the more common places are in these files:

 

.htaccess

application_top.php

header.php

index.php

 

However, there could be malicious code or anomalous files anywhere on your site. The best thing to do is delete the site and a known clean back copy (you do have a back up right ?)

 

If you do not, then you are faced with the arduous task of manually verifying each file. Download the site to your local machine and use WinGrep to search for malicious code.

 

Then, READ THE SECURITY THREAD ABOUT HOW TO SECURE YOUR SITE AND ADMIN AREA.

 

 

Chris