Results 1 to 8 of 8
  1. #1
    Join Date
    Oct 2005

    What is the best way to clean a hacked site?

    What is the best way to clean a hacked site?

    All of the pages have iframe injection and my only backup was made after the attack.

    I have hundreds of pages, do I have to edit them all manually?


  2. #2
    Join Date
    Aug 2009
    I'm afraid you must indeed edit them manually.

  3. #3
    Join Date
    Jan 2008
    If all of the iframe code is similar on all the pages then you could create a script to do if for you.

  4. #4

  5. #5
    Join Date
    Jun 2008
    Restore a working backup............unless you are 100 % u cleaned the sites by using above recommendation. It is possible that your database is also affected........

  6. #6
    Join Date
    Mar 2007
    Install and try clamdav, scan the whole server or /home remove the iframe by use of the report it can made automatic to remove the iframe infected pages
    LENOVOhost Network Solutions, designs the technology of Tomorrow
    RVSkins, Fantastico, 24/7 Support, FFMPEG, SLA Uptime, Daily Backups, End-User Support & More
    Support Desk Software | Sales, Billing & Tech End-user Support | Hosting Templates

  7. #7
    On a Linux server, you should have (in addition to Perl, but simpler) tools called grep and sed, which can find and find/replace strings in files. You can probably run these by cron if you can't do it any other way. The commands are complicated, but if it takes you 2 entire days of study to build the commands, and then 2 minutes to run them, it is still less work than spending several days cleaning files manually.

    If you've downloaded files to your local PC and it's Linux, you can use grep, sed, or ssed, same as on the server.

    If your PC is Windows, there are Windows versions of grep, and a version of sed called ssed (Super Sed).

    Editors such as FrontPage, Dreamweaver, Expression Web also have powerful search/replace commands.

  8. #8
    Join Date
    Oct 2008
    Chicago, IL
    I usually download the entire site to my local PC then use PowerGrep. Or as SteveWh pointed out, just use the command line grep.

    If you have the malscript you'd like removed, please share it and I could prepare a grep/sed command for you to use from the command line.

Similar Threads

  1. My site has been hacked
    By plainwords in forum Hosting Security and Technology
    Replies: 10
    Last Post: 10-02-2007, 08:02 PM
  2. Clean / Cheap site for sale! UNIQUE HOSTING SITE
    By KenThomp in forum Design Offers
    Replies: 2
    Last Post: 03-22-2007, 12:30 PM
  3. Detect and Clean your hacked server!! T0rnkit v8
    By admin0 in forum Hosting Security and Technology
    Replies: 46
    Last Post: 01-27-2006, 07:39 PM
  4. My Site Was Hacked!
    By kneuf in forum Web Hosting Lounge
    Replies: 16
    Last Post: 01-30-2004, 11:52 AM
  5. What to do if your site gets hacked?
    By Lawny in forum Hosting Security and Technology
    Replies: 32
    Last Post: 12-11-2001, 08:33 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts