Cancelled

Malware removal .htaccess problem

There are two security issues that my sites(hosted on bluehost) face:

1. All php files are added with a code like:

eval(base64_decode(\"DQplcnJvcl9yZXBvcn..................

I have noticed that a virus/malware in my server replaces

<php

with

<php eval(base64_decode(\"DQplcnJvcl9yZXBvcn..................

in all the files throughout the server.

This problem firstly occurred on 25t feb then on 5th March(I have removed the code using unix sed.) so I updated some of the wordpress websites and removed those themes/files which seems suspicious then this problem never came back. So i believe this issue has been rectified but i would like someone to confirm it.

2. htaccess file of my websites has be added with a code like:

----------

RewriteCond %{HTTP_REFERER} ^.*(google|ask|yahoo|baidu|youtube|wikipedia|qq|excite|altavista|msn|netscape|aol|hotbot|goto|infoseek|mamma|alltheweb|lycos|search|metacrawler|bing|dogpile|facebook|twitter|blog|live|myspace|mail|yandex|rambler|ya|aport|linkedin|flickr|nigma|liveinternet|vkontakte|webalta|filesearch|yell|openstat|metabot|nol9|zoneru|km|gigablast|entireweb|amfibi|dmoz|yippy|search|walhello|webcrawler|jayde|findwhat|teoma|euroseek|wisenut|about|thunderstone|ixquick|terra|lookle|metaeureka|searchspot|slider|topseven|allthesites|libero|clickey|galaxy|brainysearch|pocketflier|verygoodsearch|bellnet|freenet|fireball|flemiro|suchbot|acoon|cyber-content|devaro|fastbot|netzindex|abacho|allesklar|suchnase|schnellsuche|sharelook|sucharchiv|suchbiene|suchmaschine|web-archiv)\.(.*) RewriteRule ^(.*)$ [url removed, login to view] [R=301,L]

ErrorDocument 400 [url removed, login to view]

----------

I'm in need of a security expert to go through locate and clear the malware, disable the redirects and disable the door(s) the hacker is entering through by creating permanent re-entry blocks and update/change/remove files as needed to ensure that these problems do not reoccur.

In case of any questions please let me know.

Skills: PHP, Web Security

See more: remove htaccess malware, dmoz virus, htaccess malware removal, dqplcnjvcl9yzxbvcn, htaccess eval base64_decode, htaccess malware server, oas baa space, wordpress dqplcnjvcl9yzxbvcn, yandex-ru, wordpress slider expert, wordpress malware expert, wordpress blocks, wikipedia websites, sites like dmoz, problem websites, problems with wordpress websites, problem of facebook, oas server, i need a facebook hacker, google yandex ru, google ru, ask webcrawler, ask a wordpress expert, aol. web mail, wisenut security issues

About the Employer:
( 91 reviews ) Cairo, Egypt

Project ID: #1563778

12 freelancers are bidding on average $102 for this job

tuxadmin

Hi, please see my profile for security-related issues. Thank you.

$95 USD in 2 days
(130 Reviews)
6.6
grameenmelanet

Expert Here. We can solve this issue

$250 USD in 7 days
(68 Reviews)
6.2
bradhaas

Please see my private message.

$99 USD in 0 days
(52 Reviews)
5.7
Mario

Web Security expert, I'm very interested in your project. Thanks

$65 USD in 1 day
(58 Reviews)
5.6
opengeek

Let a webmaster do the [url removed, login to view] it done right now ! I look forward to talking to you,further and getting [url removed, login to view] Opengeek

$80 USD in 3 days
(72 Reviews)
5.5
spriditis

Wordpress developer. Experience cleaning blogs and restoring data after hacks. See PM..

$80 USD in 2 days
(73 Reviews)
5.2
skrmm1

Hey there. I can help you. Cheers!

$150 USD in 2 days
(35 Reviews)
5.2
TwintyOne

Hi, check PM

$110 USD in 2 days
(23 Reviews)
4.6
yonnym

Hi, I can sort this out.

$100 USD in 2 days
(0 Reviews)
0.0
ahmadprayitno

Hi, Thanks for reviewing my bid. I am specialize in Computer Security. I have read all your requirements and below are our bid details: 1. Complete price: $50 2. Proposal for: Wordpress Blog Security - looked More

$50 USD in 1 day
(0 Reviews)
0.0
eugui

Hi, i can help you. See my private message.

$45 USD in 2 days
(0 Reviews)
0.0
markbCA

I have seen this malware before. I can remove this from your server and tighten up the security to prevent this malware from re-entering. Thanks for your consideration.

$100 USD in 4 days
(0 Reviews)
0.0