Why does a code appear in the search results that is not on the site?

S

SlavaMorg2017-10-29 07:08:31

Google

SlavaMorg, 2017-10-29 07:08:31

Hello. In general, there is a site domproekt56.ru, on wordpress. If you enter "domproekt56.ru" in the search, then under the name of the site it displays this line - "wdOS, wdcp, wddns, wdcdn, lamp, lnmp, lnamp, LANMPһ װ." . It's not on the website, of course. If you look through the google search console tools, then the site code begins like this:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/tr/html4/loose.dtd">
<html>
<head>
<title>��ϲ��lanmp ��װ�ɹ� 供え wdcp  通販  -domproekt56.ru</title>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta name="author" content="wdlinux">
<meta name="keywords" content="wdOS,wdcp,wddns,wdcdn,lamp,lnmp,lnamp,LANMPһ����װ��">
<meta name="description" content="wdOS,wdcp,wddns,wdcdn,lamp,lnmp,lnamp,LANMPһ����װ��">
<style type="text/css"> 
<!--
.links {color: #009900}
.STYLE1 {font-weight: bold}
.STYLE4 {font-size: 36px}
.STYLE5 {color: #FF0000}
-->
</style>
</head>
<body>
<br>
<br>
<center>
<strong><span class="STYLE4">��ϲ��lanmp_wdcp ��װ�ɹ�</span>!</strong><br>
<h2 align="center">lanmp_wdcp��һ������nginx,apache,php,mysql��webӦ�û���<br>
  ��wdcp����ϵͳ��RPM��װ��,����������װ����,��,5���ӾͿɸ��<br>
  Ȼ��Ϳ���ͨ��wdcp��̨�������������վ,FTP,���ݿ��<br>
  ʹ�÷���,������,��ȫ,�ȶ�,����<br>
  lamp,lnmp,lnamp�������л�<br>
  <span class="STYLE5">��һ��,������ѵ�</span>.</h2><h2>></h2>
<p>wdcpϵͳ��������¼ <a href="http://www445.webjpjp.com:8080" target=_blank>http://www445.webjpjp.com:8080</a> Ĭ���û�����:admin wdlinux.cn </p>
<p><span class="STYLE1">�鿴���ػ�����</span><a href="/iProber2.php" target="_blank" class="links">̽��</a>��<a href="/phpinfo.php" target="_blank" class="links">phpinfo</a></p>
<p>wdOS����: <a href="http://www.wdos.net" target="_blank">http://www.wdos.net</a></p>
<p>wdOS��̳�������� <a href="http://www.wdlinux.cn/bbs/forum-2-1.html" target="_blank">http://www.wdlinux.cn/bbs/forum-2-1.html</a></p>
<p>lanmpһ����װ���� <a href="http://www.wdlinux.cn/bbs/forum-5-1.html" target="_blank">http://www.wdlinux.cn/bbs/forum-5-1.html</a></p>
<p>wdcp����ϵͳ��̳ <a href="http://www.wdlinux.cn/bbs/forum-3-1.html" target="_blank">http://www.wdlinux.cn/bbs/forum-3-1.html</a> </p>
<p>wddns�������DNSϵͳ <a href="http://www.wdlinux.cn/bbs/forum-18-1.html" target="_blank">http://www.wdlinux.cn/bbs/forum-18-1.html</a></p>
<p>wdcdn������ٹ���ϵͳ <a href="http://www.wdlinux.cn/bbs/forum-4-1.html" target="_blank">http://www.wdlinux.cn/bbs/forum-4-1.html</a> </p>
<p><a href="http://www.wddns.net" target="_blank">�������DNS����,����·��ʡ������DNS����</a> <a href="http://www.wdcdn.com" target="_blank">���CDN����,ȫ��CDN����</a> </p>
<h3><a href="http://www.wdos.net" target="_blank">wdOS</a> by <a href="http://www.wdlinux.cn" target="_blank">wdlinux</a> </h3>
<p>Ϊ��ȫ���,��ҳ��ɾ����������</p>
</center>

Tell me, is it a virus or what? What can be done? From what file can malicious code come from in order to replace the site code for search engines like this?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

D

Dmitry Filandor, 2017-10-29
@LifeAct

1) check the encoding in the database
2) see what's in the settings - site name Is the
template not pirated? Try another template and disable plugins one by one

A

Andrey, 2017-10-29
@andrey004

the substitution goes on the user agent. another page is given to Google: wget -U
"Mozilla/5.0 (compatible; Googlebot/2.1; + www.google.com/bot.html) "