How to get rid of malicious code (banner)?

Question

Joomla

On the site (joomla), in the admin panel, a banner from admitad pops up and interferes with the work. I delete the code in index.php, upload it to the site, but the code is back in place. How to get rid of it completely? Save!

Answer 1

You are removing the effect, not the cause.
1) you have some kind of plug-in or extension with a hole until you find it: delete do not delete it. Update, look for a hole.
2) php aibolit revisium.com/ai
2) download to local, scan with antivirus.
You need to remove the BODY of the virus and then FIND THE HOLE through which it entered.
Otherwise, everything will be again.

Answer 2

This code is written

<!-- admitad.banner: a0c51da93ff277ddd7ac8e928ffab7 ��� - ����� ����� -->
<a target="_blank" rel="nofollow" href="http://ad.admitad.com/goto/a0c51da93ff277ddd7ac8e928ffab7/">
<img width="160" height="600" border="0" src="http://ad.admitad.com/b/a0c51da93ff277ddd7ac8e928ffab7/" alt="��� - ����� �����" />
</a>
<!-- /admitad.banner -->
<!-- admitad.banner: a0c51da93ff277ddd7ac8e928ffab7 ��� - ����� ����� -->
<a target="_blank" rel="nofollow" href="http://ad.admitad.com/goto/a0c51da93ff277ddd7ac8e928ffab7/">
<img width="160" height="600" border="0" src="http://ad.admitad.com/b/a0c51da93ff277ddd7ac8e928ffab7/" alt="��� - ����� �����" />
</a>
<!-- /admitad.banner -->
<!-- admitad.banner: a0c51da93ff277ddd7ac8e928ffab7 ��� - ����� ����� -->
<a target="_blank" rel="nofollow" href="http://ad.admitad.com/goto/a0c51da93ff277ddd7ac8e928ffab7/">
<img width="160" height="600" border="0" src="http://ad.admitad.com/b/a0c51da93ff277ddd7ac8e928ffab7/" alt="��� - ����� �����" />
</a>
<!-- /admitad.banner -->
<!-- admitad.banner: a0c51da93ff277ddd7ac8e928ffab7 ��� - ����� ����� -->
<a target="_blank" rel="nofollow" href="http://ad.admitad.com/goto/a0c51da93ff277ddd7ac8e928ffab7/">
<img width="160" height="600" border="0" src="http://ad.admitad.com/b/a0c51da93ff277ddd7ac8e928ffab7/" alt="��� - ����� �����" />
</a>
<!-- /admitad.banner -->