Hi,

I need help here. Think my website is infected with bestnums.net

Is there anyway to remove this redirection to bestnums? Can someone please advise.

Thanks n Regards.

Is it just 1 page on your site, is it all the pages in a folder or is it every page on the website?

A lot of websites get hacked because they use older versions of website software such as forums or blogs. These applications can have security vulnerabilities in them which should be fixed in newer versions. If you use any applications like that on your site, check if a newer version is available.

Hi tetak,

Thanks for replying.

Yup, it's infected on my forum which is run on invision. It's the loading of the first page that hanged up the system. I will have to reboot the system.

Hmm.. even if i can get a newer version of invision, i will need to clear off this infection first?

1st you need to remove the new code from your site.

If you've got a copy of a clean version of the main forum page (often called index.php) you could upload that clean page from your PC (via FTP) and overwrite the affected page.

Then check the forum to make sure the code is gone from the site.


Next you need to update invision to the latest version.

Finially check the whole site to see if anything else has changed. Look at the files on the site, have any files been modified, added, removed?

Then check the database invision uses. It's probably a MySQL database which you probably administrate using PHPMyAdmin. Look for anything you didn't do. Are there any users with admin accounts which shouldn't be there, are there any new tables which you didn't create?

Ok, I'll try that out. Will update here again.

Really thanks for your advice.