Removing Malicious Redirects From Your Website

purple squiggle

Is your website redirecting to another website? It’s probably a malicious redirect, a type of code inserted into your website using adware or another type of malware. The goal of these programs is to point users towards certain ads to gain impressions or dangerous code that can damage their system. The best way to deal with this issue is by making sure that all malware is removed, your website is up to date and you have the latest security software installed.

Let’s learn more about malicious redirects and what to do when you fall victim.

Is your site infected?

Most site owners don’t know that their site is redirecting visitors until someone tells them. Even if someone tells you that they can’t reach your website, you might not notice anything on your end. Malicious redirects can be sporadic, only affecting certain users. It’s very important that you fix the issues on your site as soon as you learn about them. Google isn’t going to take chances with its reputation, so it may blacklist your site.

Finding malicious redirects

Malicious code can be inserted anywhere on your site. It’s difficult to spot because malicious script is usually designed to look like a legitimate file. Here are some areas to check for suspicious code:

  • WordPress files
  • index.php
  • index.html
  • .htaccess file
  • theme files
  • header.php
  • footer.php
  • functions.php

Removing malicious code

Before making any changes to your site, back up all of your files in a safe place. The backup should contain the hacked pages. We also suggest taking your website offline temporarily so that you can fix the issues and prevent users from seeing the hacked pages. Unless you have knowledge about JavaScript, CMS or PHP files, consult a professional like Magna Technology.

Simple steps to removing malware

If you are comfortable removing malware from WordPress, you can follow the simple steps below. Make sure your site is offline and backed up first. Here’s a complete guide on detecting and fixing a malware redirect hack.

  • Scan your WordPress site for malware
  • Find the malicious code
  • Remove bad code
  • Update plugins, themes, etc.
  • Change or reset passwords

The best way to avoid malicious redirects is prevention. Be sure that your core files are updated, you’re using the latest versions of plugins and themes and you limit admin accounts. For assistance finding or removing malicious code from your site, contact Magna Technology today.