How to remove pharma Hack

[mub21]

Hello,

My client website has been pharma hacked, and got many badlinks. How to remove pharma hack from PHP website.

Plz Help me out.

Thanks

[i-hate-scammers]

Hi,

Please let me know what CMS your client is using so I can help you.

Cheers,

[Zeitgeist]

I had that once and it was because of a timthumb vulnerability. What I did was changing to a theme that did not use timthumb. Besides, I also got me one of those add-ons for Firefox that show all the html source code. I guess it´s called developers tool or something like that. And with that add-on, you can inspect the htm/code of certain objects on the website. I marked the area where the pharma hack is injected, wrote that data down and removed the mailicious code by hand in the infected pages. It was 2 years ago and I dont exactly remember what I did to get rid of it but I installed a wordpress anti-malware plugin as well. I currently use Eli´s Anti Malware plugin and I´d recommend you to check the website for infected files or backdoors. If you want to check if you were able to clean the whole website, use the google search to search for pharma name in combination with "site:yourdomainname" . It usually takes a few days until Google has re-indexed the website without the injected code. They sometimes use images to hide their malware injection and you need to carefully inspect the injecting code and see where it leads to. I know it´s not easy but if you work on it for a few days you definitely can get rid of it.