Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.
up vote 0 down vote favorite

Possible Duplicate:
Titles in Google results contain spammy prefixes

I have a webshop online called omnivisionshop and I have some problems with redirecting from Google.

Case 1 When I Google for omnivisionshop at google.com in Iron SWR (safe Chrome version) and I click the first link (omnivisionshop.com) I get the correct page.

Case 2 When I Google for omnivisionshop at google.nl in Iron SWR (safe Chrome version) and I click the first link (omnivisionshop.com) Google wil redirect me to http://piopo.25u.com/.

Case 3 When I Google for omnivisionshop in Google Chrome and I click the first link (omnivisionshop.com) Google wil redirect me to http://piopo.25u.com/.

Case 4 When I Google for omnivisionshop in Fire Fox and I click the first link (omnivisionshop.com) Google wil redirect me to http://piopo.25u.com/.

Case 5 When I Google for omnivisionshop in Internet Explorer and I click the first link (omnivisionshop.com) Google wil redirect me a page that tells me the site is offline.

HELP WHAT TO DO?

I checked the .htaccess but this file is correct. I checked the index.php file but this one is also correct.

What can I do? Hacked or does Google has trouble?

Thanks.

share|improve this question
You are hacked. Restore a good backup of your site and update you Joomla installation. – PeeHaa 埽 Jul 17 '12 at 11:57
@PeeHaa Yes I am hacked :( I called my provider and he said I am hit by the base64 hack. My provider moved my website to another domain with other passwords. Hopefully it works. – Bondye Jul 17 '12 at 12:00

marked as duplicate by John Conde♦ Jul 17 '12 at 17:00

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

2 Answers

up vote 7 down vote accepted

You are definitely hacked, hackers recently have been employing methods which make the site appear normal to a direct user, but when coming from Google will redirect to their website.

You basically need to change all your passwords, and then sift through your code. As your tags state you're using joomla you should be able to replace all the joomla core files with freshly downloaded ones. As for any themes/edits you've made, you'll have to check. Good things to look out for are base64_decode and eval calls. If you're loading templates from the database don't forget to check their too.

TBH in this situation it's normally best to do a fresh install of your CMS and start again just so you can be sure.

If you are on a shared host also notify them of the issue because it could be the fault of another site on your box!

share|improve this answer
You are right. In every php file is see eval(base64_decode(); – Bondye Jul 17 '12 at 11:11
up vote 2 down vote

I agree with Dunhamzzz (although can't comment yet as not enough points).

A search using Bing and Google (even on different TLD (eg, co.uk,.com, .in etc) fails. So, a search from an "unheard of in the west" Chinese site shows it works fine:

http://www.baidu.com/s?wd=omnivisionshop&rsv_bp=0&rsv_spt=3&rsv_n=2&inputT=597

Treat as urgent and hope you didn't leave password information in your code.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.