Hacked Again - errorlog_enable error

13 posts by 5 authors in: Forums > CMS Builder
Last Post: November 24, 2015   (RSS)

By lakesidechurch - November 22, 2015 - edited: November 22, 2015

Hi Dave,

I'm sorry I haven't replied to any of your posts yet. Thank you for the suggestions and help.

I just deleted all the files and uploaded a clean copy of the website. It kinda works right now. I can get to the site if I explicitly access a php file. http://springflingevent.ca/index.php works. http://springflingevent.ca/ does not work though. I have looked for .htaccess files and I can't see anything. I am running virtualmin, so the apache settings were not set by me, but I looked in the sites-enabled folder at the .conf file for the site and I didn't see any rewrite rules that looked like they wouldd be causing problems. And, as I said in one of my posts, the other sites from the server work fine. I am not using namespro as my web host nor do I have my domain registered with them. I believe the files I just uploaded are exactly the same ones I uploaded before all this trouble, when things were working.

Is there anything else I should try?

**EDIT** I had posted after this post that I found some files in the JS folder that were not supposed to be there (they had random filenames and were full of base64 encoded code). After deleting them the site seemed fixed. However within minutes it stopped working and again redirects to namespro.ca. I will take another look and make sure I am not missing something hiding in a folder, but for now, the redirect problem is still here.**EDIT**

Thank you,

Jacob

By Dave - November 23, 2015

Hi Jacob,

The things you want to check is .htaccess files, php, js, and html.  Unfortunately it's just a process of elimination where you need to go through each file and determine where the redirect is happening.  

We do have our exploit scanner available which can help: http://www.interactivetools.com/add-ons/exploit-scanner/

And we can also have our consulting team help locate hack problems.  Again, often just a process of elimination though and can take some time.

Good luck, and let me know if we can do anything to assist.

Dave Edis - Senior Developer
interactivetools.com

By lakesidechurch - November 24, 2015

Hi Dave,

Thank you for the suggestions again. I noticed that only www.springflingevent.ca redirects, springflingevent.ca didn't. I took a look at my DNS settings and noticed that my CNAME record for www had a typo in it :/. Now that it has been corrected, all seems to be working well.

Thank you for all your assistance troubleshooting and fixing these problems!

Jacob