Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
My server’s been hacked EMERGENCY

I can go directly to the site or www. without issue, but if I click on the link in google or yahoo it redirects to spam sites. Swagbucks works though! This is not on a single computer this happens on systems isolated from each other(Try it, avast blocks it) . The site is runing joomla 1.5.25 . I deleted .htacces, put fresh index.php and index2.php files. and still get the same results. Any ideas?

share|improve this question

marked as duplicate by Shane Madden, EEAA, Michael Hampton, Tom O'Connor, voretaq7 Oct 19 '12 at 22:23

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

Apparently so. Your web host has suspended the account. – Michael Hampton Oct 16 '12 at 11:42
@MichaelHampton I suspended the account until it's sorted so it won't infect people. I am the host. – wmbf86 Oct 16 '12 at 16:13
up vote 1 down vote accepted

It's hard to pin-point for you where the virus is from where we stand. But, this is one of the common behaviors of hacked sites. The hack does not redirect users all the time, but only when they come from search engines. This ensures that the site owner -- whom would have no reasons to search for it to find out late whereas many victims would be forwarded.

You can use free tools like Sucuri to assist you in finding the virus.

If all else fails, you may wish to consult a security firm who specializes in such.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.