Sites Hacked


3rd time my sites have been hacked in 2 years. Help!

Hackers Bite.

This time, it’s writing to javascript files to the bottom. I can see it when I ‘view source’ but not when I download it to my text editor. I’m lost as to how he/they/it did that one!

Any assistance much obliged.


P.S. They are also very slow which I would assume is related…

Sounds like the foreign code is being included via another file.

Check .htaccess first, then go through all the included files to track it down.

Start here:

Make sure each of your sites runs in its own user when you finish cleaning up.