website being hijacked with a perl script

[yogibear439]

Hi all

My website is being hijacked with a nph-redirect.pl script, i am not sure what to remove or look for currently.

Basically all the content of my website it now pointing to unwanted materials within any search engine.

Please help.

 

[KevinADC]

That script is to redirect 404 errors (last I ever know of). Did something change recently on your site?

------------------------------------------
- Kevin, perl coder unexceptional!

 

[Toastytoast]

hmm weird i believe they are actually supose to help not destroy her is the code for one if you wanna take a look but i can't really help much more maybe its a modded version of the script meh you never know what some people will do just to screw other people over

 

[yogibear439]

but this is the custom made script.

What its doing is that its tagged to my main url address with other rubbish url with the ? mark after it

http://bob.com/cgi-bin/nph-redirect.pl?url=http://x-more-x.net/in.php

What i need is to know which or what to edit so that this doesn't occur in the future

 

[Toastytoast]

could you upload the original source from your web site i'll take a look and see if i can help

 

[yogibear439]

Toastytoast unfortunately I can;t upload the original source from the website as I got a strictly confidential information, thanks for your post of your pl script, unfortunately my only perl coder is on training all this week.

Once they return back on Monday I will get them to look into it. Thanks heaps, I will post the outcome at the end.

Cheers

 

[Toastytoast]

well its all cool and i wish you the best of luck yogi and btw it wasn't my script i found via google i can't code that fast or that good

 

[Toastytoast]

all though the problem might be as simple as your missing this page

http://bob.com/Lockheed Aircraft Company 1929 - signed by founder Allan Loughead RARE

 

[Toastytoast]

in which case you would just have to remake the page, fix some links, or if you might have renamed the page and forgot about it trust me the perl script didn't hijack your site your simply missing a page or something and the perl script redirects you because the page is missing or got renamed or something simple like that