{"id":2671,"date":"2010-05-11T10:09:55","date_gmt":"2010-05-11T08:09:55","guid":{"rendered":"http:\/\/localhost\/helpcentre\/?p=2671"},"modified":"2025-12-29T09:52:29","modified_gmt":"2025-12-29T07:52:29","slug":"why-does-my-home-page-have-a-virus","status":"publish","type":"post","link":"https:\/\/xneelo.co.za\/help-centre\/website\/why-does-my-home-page-have-a-virus\/","title":{"rendered":"Why does my home page have a virus?"},"content":{"rendered":"<p>If your <b>home page<\/b> has been altered this may be as a result of <a href=\"https:\/\/en.wikipedia.org\/wiki\/Malware\" target=\"_blank\" rel=\"noopener noreferrer\">Malware<\/a> that has been embedded in your code through a <a href=\"https:\/\/en.wikipedia.org\/wiki\/Trojan_horse_(computing)\" target=\"_blank\" rel=\"noopener noreferrer\">Trojan<\/a> virus on your local computer.<\/p>\n<p>This malware is not an active virus on our server but is a piece of code embedded in your content.<\/p>\n<h2>How did a virus get onto my website?<\/h2>\n<ul>\n<li>If you do not have Anti Virus software or if the software is outdated. A virus on your local machine may have attached itself to a local copy of your website or harvested your FTP password from an FTP application that may have the details stored in it. The virus may contain spyware delivering FTP and other personal information to the hacker<\/li>\n<li>By an individual that has FTP access to your domain.<\/li>\n<\/ul>\n<h2>How to remove the malware<\/h2>\n<p>Malware displays as strange code or iframe tags which are written just below the body tag. Follow the steps to remove malware:<\/p>\n<div id=\"action_points\">\n<ol>\n<li>Reset your <a title=\"FTP password\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/how-to-change-your-ftp-password\/\" target=\"_blank\" rel=\"noopener\">FTP password<\/a><\/li>\n<li>Run a scan of your local computer with up-to-date Anti Virus software.<\/li>\n<li>Log in to your site with your FTP details and edit the file which has malware (this is usually your index or landing page).<\/li>\n<li>Look for the iframe tag or strange code just below the Body or Head tag.<\/li>\n<li>Remove the coding and overwrite the file.<\/li>\n<li>Change the <a title=\"permissions\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/chmod\/\" target=\"_blank\" rel=\"noopener\">permissions<\/a> of the content to \u201c444\u201d. So that no hackers have privileges to write to the files.<\/li>\n<\/ol>\n<\/div>\n<p>You may need to request a Google site review to get the warning pages removed:<\/p>\n<div id=\"action_points\">\n<ol>\n<li>Browse to Google <a title=\"Malware and hacked sites\" href=\"http:\/\/www.google.com\/support\/webmasters\/bin\/answer.py?answer=45432#3\" target=\"_blank\" rel=\"noopener noreferrer\">Malware and hacked sites<\/a> page.<\/li>\n<li>Once you have reviewed your site and are sure it is clean, you can submit a request for review. Note that you\u2019ll need to verify site ownership before you can request a site review.<\/li>\n<li>On the Webmaster Tools Home page, select the site you want.<\/li>\n<li>In the Parts of this site may be distributing malware message, click \u2018More details\u2019.<\/li>\n<li>Click \u2018Request a review\u2019.<\/li>\n<\/ol>\n<\/div>\n<p>Google will review your site and if they determine that it doesn\u2019t host or distribute badware, will remove the identification from the search results.<\/p>\n","protected":false,"plain":"If your <b>home page<\/b> has been altered this may be as a result of <a href=\"https:\/\/en.wikipedia.org\/wiki\/Malware\" target=\"_blank\" rel=\"noopener noreferrer\">Malware<\/a> that has been embedded in your code through a <a href=\"https:\/\/en.wikipedia.org\/wiki\/Trojan_horse_(computing)\" target=\"_blank\" rel=\"noopener noreferrer\">Trojan<\/a> virus on your local computer.\r\n\r\nThis malware is not an active virus on our server but is a piece of code embedded in your content.\r\n<h2>How did a virus get onto my website?<\/h2>\r\n<ul>\r\n \t<li>If you do not have Anti Virus software or if the software is outdated. A virus on your local machine may have attached itself to a local copy of your website or harvested your FTP password from an FTP application that may have the details stored in it. The virus may contain spyware delivering FTP and other personal information to the hacker<\/li>\r\n \t<li>By an individual that has FTP access to your domain.<\/li>\r\n<\/ul>\r\n<h2>How to remove the malware<\/h2>\r\nMalware displays as strange code or iframe tags which are written just below the body tag. Follow the steps to remove malware:\r\n<div id=\"action_points\">\r\n<ol>\r\n \t<li>Reset your <a title=\"FTP password\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/how-to-change-your-ftp-password\/\" target=\"_blank\" rel=\"noopener\">FTP password<\/a><\/li>\r\n \t<li>Run a scan of your local computer with up-to-date Anti Virus software.<\/li>\r\n \t<li>Log in to your site with your FTP details and edit the file which has malware (this is usually your index or landing page).<\/li>\r\n \t<li>Look for the iframe tag or strange code just below the Body or Head tag.<\/li>\r\n \t<li>Remove the coding and overwrite the file.<\/li>\r\n \t<li>Change the <a title=\"permissions\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/chmod\/\" target=\"_blank\" rel=\"noopener\">permissions<\/a> of the content to \u201c444\u201d. So that no hackers have privileges to write to the files.<\/li>\r\n<\/ol>\r\n<\/div>\r\nYou may need to request a Google site review to get the warning pages removed:\r\n<div id=\"action_points\">\r\n<ol>\r\n \t<li>Browse to Google <a title=\"Malware and hacked sites\" href=\"http:\/\/www.google.com\/support\/webmasters\/bin\/answer.py?answer=45432#3\" target=\"_blank\" rel=\"noopener noreferrer\">Malware and hacked sites<\/a> page.<\/li>\r\n \t<li>Once you have reviewed your site and are sure it is clean, you can submit a request for review. Note that you\u2019ll need to verify site ownership before you can request a site review.<\/li>\r\n \t<li>On the Webmaster Tools Home page, select the site you want.<\/li>\r\n \t<li>In the Parts of this site may be distributing malware message, click \u2018More details\u2019.<\/li>\r\n \t<li>Click \u2018Request a review\u2019.<\/li>\r\n<\/ol>\r\n<\/div>\r\nGoogle will review your site and if they determine that it doesn\u2019t host or distribute badware, will remove the identification from the search results."},"excerpt":{"rendered":"<p>If your home page has been altered this may be as a result of Malware that has been embedded in your code through a Trojan virus on your local computer.<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"lsx_disable_title":"0","_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","footnotes":""},"categories":[170,166,188],"tags":[55],"topics":[10377,10463],"class_list":["post-2671","post","type-post","status-publish","format-standard","hentry","category-troubleshooting-website","category-website","category-website-security","tag-website_security","topics-website-security","topics-website-problems"],"acf":[],"additional_meta":{"category_title":[{"term_id":170,"name":"Troubleshooting Website problems","slug":"troubleshooting-website","term_group":0,"term_taxonomy_id":170,"taxonomy":"category","description":"Solving website problems","parent":166,"count":13,"filter":"raw","term_order":"105","cat_ID":170,"category_count":13,"category_description":"Solving website problems","cat_name":"Troubleshooting Website problems","category_nicename":"troubleshooting-website","category_parent":166},{"term_id":166,"name":"Website","slug":"website","term_group":0,"term_taxonomy_id":166,"taxonomy":"category","description":"About your Website(s)","parent":0,"count":169,"filter":"raw","term_order":"120","cat_ID":166,"category_count":169,"category_description":"About your Website(s)","cat_name":"Website","category_nicename":"website","category_parent":0},{"term_id":188,"name":"Website Security","slug":"website-security","term_group":0,"term_taxonomy_id":188,"taxonomy":"category","description":"Securing your website","parent":168,"count":15,"filter":"raw","term_order":"122","cat_ID":188,"category_count":15,"category_description":"Securing your website","cat_name":"Website Security","category_nicename":"website-security","category_parent":168}],"tag_title":[{"term_id":55,"name":"Website Security","slug":"website_security","term_group":0,"term_taxonomy_id":55,"taxonomy":"post_tag","description":"","parent":0,"count":5,"filter":"raw","term_order":"3027"}]},"featured_image_src":null,"author_info":{"display_name":"marketing","author_link":"https:\/\/xneelo.co.za\/help-centre\/author\/marketing\/","author_avatar":"https:\/\/secure.gravatar.com\/avatar\/a6ea315e112423b2b955cb020fbce2b0835956c6ad85ff0f13f1db298977eaaa?s=96&d=mm&r=g"},"_links":{"self":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/2671","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/comments?post=2671"}],"version-history":[{"count":0,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/2671\/revisions"}],"wp:attachment":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/media?parent=2671"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/categories?post=2671"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/tags?post=2671"},{"taxonomy":"topics","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/topics?post=2671"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}