How to remove .htaccess virus? [closed]

Posted by bleepingcrows on Server Fault See other posts from Server Fault or by bleepingcrows
Published on 2012-07-13T04:49:34Z Indexed on 2012/10/10 15:39 UTC
Read the original article Hit count: 209

Filed under:

.htaccess

|

joomla

|

virus

|

malicious

Possible Duplicate:
My server's been hacked EMERGENCY

First time posting so bear with me please!

My friend's site has been hacked and the .htaccess file (which I really know nothing about) has been injected with a malicious redirect that forces search engines to the see the site as a "harmful website." If you look at the .htaccess file you can see it's Russian or at least ends in .ru. Seeing as I know very little about this stuff, I simply tried to restore the good .htaccess file back with his host. This doesn't work as the virus just recreates the infected .htaccess file.

When I searched through the rest of his directories, I can see the same bad .htaccess file in most of the folders.

I can't seem to help him get rid of this virus.

© Server Fault or respective owner

Related posts about .htaccess

Seeking htaccess help: Converting multiple subdomains (both http and https) to www.domain.com using .htaccess

as seen on Pro Webmasters - Search for 'Pro Webmasters'
I've been trying to get an answer to this question on other forums (the folks at SuperUser thought this was the place I needed to post) and via my connections, but I haven't gotten very far. Hopefully you guys can help me find an answer: I've got a dozen old subdomains that have been indexed by Google… >>> More
.htaccess Permission denied. Unable to check htaccess file

as seen on Server Fault - Search for 'Server Fault'
Hi, I have a strange problem when adding a sub-domain to our virtual server. I have done similar sub-domains before and they have worked fine. When I try to access the sub-domain I get an 403 Forbidden error. I checked the error logs and have the following error: pcfg_openfile: unable to check… >>> More
Disable .htaccess or disable some rules from .htaccess on specific URL

as seen on Server Fault - Search for 'Server Fault'
I have Kerberos-based authentication and I want to disable it on only root url: mysite.com/. And I want it to works fine on any other page like mysite.com/page1. I have such things in my .htaccess: AuthType Kerberos AuthName "Domain login" KrbAuthRealms DOMAIN.COM KrbMethodK5Passwd on Krb5KeyTab… >>> More
.htaccess Permission denied. Unable to check htaccess file

as seen on Server Fault - Search for 'Server Fault'
I have a strange problem when adding a sub-domain to our virtual server. I have done similar sub-domains before and they have worked fine. When I try to access the sub-domain I get an 403 Forbidden error. I checked the error logs and have the following error: pcfg_openfile: unable to check htaccess… >>> More
Permission denied: /home/.htaccess pcfg_openfile: unable to check htaccess file

as seen on Server Fault - Search for 'Server Fault'
This domain was working this morning, now I get a 403 error and the message above in my error log. I'm not using .htaccess files but I have been doing some copy on the server so may have messed things up but no changes to this domain (unless by accident!). What is this pcfg_openfile thing anyway? Done… >>> More

Related posts about joomla

Hire Expert Joomla Developers For Best Joomla Web Development

as seen on Ezine Articles - Search for 'Ezine Articles'
With the introduction of new tool like Joomla CMS it has become easier to build websites without any difficulty. Joomla can offer you a dynamic website with robust content management system, but at the same time hiring expert Joomla developers can further let you get a professional, attractive and… >>> More
joomla: editing the mvc package for joomla component development

as seen on Stack Overflow - Search for 'Stack Overflow'
hi! i m new to joomla component development i hv just downloaded bunch of files from some jooomla mvc generater website.which llok like smthng like this hello.xml - frontend/index.html - frontend/hello.php - frontend/controller.php - frontend/models/index.html - frontend/models/hello… >>> More
Joomla "online-order" component for Joomla

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello Word :) Somebody can help me in finding an "online - ordering" component for joomla . That can contain the following function : Possibility of creating Form with pages like RS!Form Uploading Files Supporting Payment Gateways like PayPal , MasterCard , WebMoney , YandexMoney ,Money Bookers… >>> More
Joomla, Joomla 1.5, Mambo or Drupal?

as seen on Ezine Articles - Search for 'Ezine Articles'
I won't be commenting here on which one is the best. Every web developer has his/her own preferences and likes. Joomla 1.5 being my favorite isn't bound to be yours as well. >>> More
Joomla: Warning: strpos() [function.strpos]: Empty delimiter in [installdir]\libraries\joomla\enviro

as seen on Stack Overflow - Search for 'Stack Overflow'
After installing Joomla 1.5.x on an IIS 7, instead of seeing the expected sample data I see an un-styled (sample data) page and this message at the very top of the page: Joomla: Warning: strpos() [function.strpos]: Empty delimiter in [installdir]\libraries\joomla\environment\uri.php on line 162 How… >>> More