Removal of malware from the OpenCart website

Cybersecurity & Data Protection — incorrectly specified categories?

22 USD

Project translated automatically. Log in or register, to view the original

It is necessary to remove the virus from the site on OpenCart. The standard antivirus check on the hosting does not find the virus, but it is detected by Avast and Google Ads, which has applied restrictions to the ads, considering the site as gambling. Apparently, there is a vulnerability. Most likely, the virus has left some code, a script that loads image data from outside onto the site, as they are not physically present on the site (at least I cannot find them). A Google image search finds my site with these images. The work will be considered completed after confirmation from Google and the antivirus about the elimination and absence of malicious software.

One of the links https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjIior7xYqRAxVMcfEDHYhNIL0Qn5YKegQIFhAB&url=https%3A%2F%2Fleleka-textile.com%2F&usg=AOvVaw3NM6mEYO2eWW_y-c18kyFt&opi=89978449

Proposals 8 Withdrawn 1 Discussions 2

Ihor Leontiuk

18 0

Budget: 1000 UAH Deadline: 2 days

Good day!
I specialize in treating OpenCart. The described problem is familiar to me — it is a hidden injection (cloaking) that is often missed by regular hosting scanners.

What I will do:
I will manually analyze the files and database, find the script that loads "gambling" content.
I will remove the malicious code and close the vulnerability (backdoor) to prevent the hack from recurring.
I will assist with submitting a request for re-evaluation to Google.

I agree with the condition: I will only submit the order after the tags are removed in Google Ads and after clean antivirus reports.
I am ready to start now.

Oleksandr Davydiuk

77 3

Budget: 1500 UAH Deadline: 1 day

Hello! I have been working with OpenCart for 15 years.
I know all its weaknesses, I know how to optimize and protect it.
Most likely, you are using some unofficial extension, "bad freelancers" play around with such things (as do some clients). And the author of the extension or the author of the null is "teaching" in this way.
I have often encountered this. In any case - I am ready to help!