MyBB Community Forums
Site Hacked [Google results takes to spam site] - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: Community Archive (https://community.mybb.com/forum-106.html)
+--- Forum: Archived Forums (https://community.mybb.com/forum-143.html)
+---- Forum: Archived Development and Support (https://community.mybb.com/forum-155.html)
+----- Forum: MyBB 1.6 (https://community.mybb.com/forum-138.html)
+------ Forum: 1.6 Security Management and Support (https://community.mybb.com/forum-153.html)
+------ Thread: Site Hacked [Google results takes to spam site] (/thread-123552.html)

Pages: 1 2


Site Hacked [Google results takes to spam site] - jaanfx - 2012-07-31

I've checked the httaccess file and that seems fine, I've re-uploaded it and still problem exist.

If I type in "ejaan" in google and click on the site "ejaan.com" as the first result, it takes to some other sites. It was never liked that before.

Can't seem to locate the problem.. where should I be looking? I've search through this forum and don't see anyone else having this problem.

Thank you in advance.


RE: Site Hacked [Google results takes to spam site] - Paul H. - 2012-07-31

Works fine for me.

Edit: oops, I went to the site directly, not using google. Lemme check it out...


RE: Site Hacked [Google results takes to spam site] - brad-t - 2012-07-31

so weird. wow.


RE: Site Hacked [Google results takes to spam site] - Josh H. - 2012-07-31

I don't see anything odd. I see a forum with a default theme and thousands of posts. It sounds like this may be browser-dependant or conditional. Check the integrity of files, such as index.php using the File Verification tool in the ACP.


RE: Site Hacked [Google results takes to spam site] - pavemen - 2012-07-31

have you run a file verification? install any plugins lately?

(2012-07-31, 03:35 AM)Josh H. Wrote: I don't see anything odd. I see a forum with a default theme and thousands of posts. It sounds like this may be browser-dependant or conditional. Check the integrity of files, such as index.php using the File Verification tool in the ACP.

I see it. direct access works fine, come from google and it hits the domain correctly, but immediately redirects


RE: Site Hacked [Google results takes to spam site] - Dark Byte - 2012-07-31

it's Google results fault, submit your site to them. i has this similar issue, by resubmitting your site to the search engine it fixed it.
https://www.google.com/webmasters/tools/submit-url?pli=1


RE: Site Hacked [Google results takes to spam site] - crazy4cs - 2012-07-31

Check if some malicious plugin or edits in your index file or something checks that if http referrer is not blank or originating from domain, then redirect it to malicious site. If some script or you has changed anything related to httprefferer, it maybe causing this.


RE: Site Hacked [Google results takes to spam site] - Dannymh - 2012-07-31

If you have ssh access you can connect up and then use Grep to search for the domain or site it is redirecting to. Also search for any othe htaccess files

If you don't have ssh access then download a backup of your installation and do a search in files using something like edit plus.

Finally open up phpmyadmin and then do a wildcats search on all tables for the URL it's redirecting to so %whatever.com%

It's a but resource intensive but after doing that you will completely rule out anything on your server side


RE: Site Hacked [Google results takes to spam site] - Adobe - 2012-07-31

Since when did drugs become cheap? Dodgy

Anyways, It's a problem with your domain or possibly some hacked your site and edited the index file so as soon as someone goes on your site, it redirects to the spam website.


RE: Site Hacked [Google results takes to spam site] - jaanfx - 2012-08-10

Thanks guys. I just did the file verification and it showing me the following:
admin/jscripts/codepress/languages/javascript.js Changed
admin/modules/user/admin_permissions.php Changed
inc/functions.php Changed
inc/languages/english/admin/config_profile_fields.lang.php Changed
inc/functions_post.php Changed

what should I do?

The most strangest thing I've just discovered is that if you visit the site using refferer as Googlebot, it shows the old version of the index page with viagra title which was on phpbb.. but those files were cleaned from the server 100%.. and no trace of phpbb files were left. i've just checked the httacess and index files, seems fine and normal.