Advice if site appears to have been hacked

Permalink
Hi I wondered if anyone here could give any advice on if a site has been hacked (not blaming C5!). It appears hidden links have been put in the footer that can only be seen on source code view. Does anyone here have any idea how these can be removed form maybe past experience

clairec
 
jgarcia replied on at Permalink Reply
jgarcia
Do you have a link?
frz replied on at Permalink Reply
frz
what we would do is look for anything that looks like a signature in the code that is injected, and then google it. Even unique variable names or function calls - if you see an error - any string you can get.

Typically what you'll find is some other links about a server vulnerability or other fixable thing.

Also contact your webhost and let them know whats going on. They may be able to help you with where bad traffic is coming from.