Virus on the site or the user?

B

BoBoeing2019-04-11 15:33:53

Malware

BoBoeing, 2019-04-11 15:33:53

Hello! I will describe the problem... Site on DLE - ogfb.od.ua. Some kind of virus has appeared that creates transitions from menu buttons and other links on site pages to the site site https://xn-----6kcabed6aal0b2ajfgaf0a5b.gq/, and this happens quite spontaneously constantly from random links
Checking hosting for viruses is not gave results. I didn't find anything in the files either.
Tell me how to fix it, maybe someone came across a similar one. Is it some kind of virus inside the site? Or on the user side? Because it does not appear on my computer, but I constantly receive complaints from other people about the transitions to this site. Facebook and Instagram also ban any links from the site ogfb.od.ua.
Please tell me how to fix it.

Reply

Answer the question

In order to leave comments, you need to log in

4 answer(s)

A

Apache86, 2019-04-11
@BoBoeing

You have a virus in the file
ogfb.od.ua/templates/paradox2/js/bootstrap.min.js

S

sferos, 2019-04-11
@sferos

Your check may not give anything if the links themselves are replaced. Check the files or database where the initial links come from, what href is specified there. If there is only one href, and the click leads to another, then somewhere in the scripts an event is tracked and a redirect occurs. Then check js.

L

lamer350, 2019-04-11
@lamer350

A virus is a malicious program, an antivirus searches for code matches in the database. Viruses are constantly updating the code so that they are not detected by antiviruses xD It's like searching for criminals by fingerprints, you can only find them if they have already been involved ...
Therefore, there is no instruction that will give you a 100% result. Perhaps this code was left to you by the developer who made the site because you did not pay him for the work, or you downloaded a nulled template, and now you want to find the truth? Hire a freelance security specialist and he will find the cause. The fact that you received only one complaint already seems to indicate that the problem is in the site.

S

sayapinant, 2019-04-11
@sayapinant

I once encountered something similar. I couldn't figure out why I was getting virus messages from my site. When contacting the TP of my hosting provider, it turned out that the domain was stolen. How? Couldn't answer. And the virus got thanks to these figures. I then corrected everything, but I learned a good lesson for the future. Maybe you do the same?