如何从我的网站中删除HTML注入

Question

Today I was looking for my cached page of my website then I find that Google indexed lot of spammy pages which I cannot find in my website.

My website is a college website but in Google there are pages of " nike air max 95 at jd sports " and all my url's are rewrite but in Google it showing a new url (this is similar like my URL: http://example.com/?nike-max-air-343.html ).

When I try to find this page in my website I didn't find any of these pages. Kindly provide me any possible solutions so the Google can't list a

"This site maybe Hacked"

message on SERP.

Answer 1

Whenever this happended to me I started the lookforbadguys.php script, you can find here

https://gist.github.com/jasperf/3191259

Copy this file into the DOCUMENT_ROOT of your page and then call in browser

http://example.com/lookforbadguys.php

It then scans your file-system under document root for suscpicious file names and code

It may create a long list of hits, and you have to check every single one (if you don't know exactly that you made it yourself). This is tedious, but I works.

One little hint: Save the output of the scan as html file and open that file in browser. This prevents the script to scan on reload.

After that you must identify the security holes of your server. You may have to update installed software and/or your scripts.

Answer 2

I don't think you have to do anything. I had a similar warning today.

"Hacked by Andreas Rehm 2006..." seems to be part of the source code for the file on line# 353 Source for file OLERead.php on grad.clemson.edu