Site Hacked. Adding a redirect script to the site header

[DarkRIDDeR]

I currently have a website which has been hacked. Automatic Adding a redirect javascript to the site header. This script can be seen "conf - design -> design head includes". However, if I remove it, it appears after a while again. Antivirus scanning does not give anything. Please tell me how to do better?

[DarkRIDDeR]

I currently have a website which has been hacked. Automatic Adding a redirect javascript to the site header. This script can be seen "conf - design -> design head includes". However, if I remove it, it appears after a while again. Antivirus scanning does not give anything. Please tell me how to do better?

[DarkRIDDeR]

I currently have a website which has been hacked. Automatic Adding a redirect javascript to the site header. This script can be seen "conf - design -> design head includes". However, if I remove it, it appears after a while again. Antivirus scanning does not give anything. Please tell me how to do better?

[Damian Culotta]

Hi @DarkRIDDeR,

Can you check in the Adminhtml users list if you find some unknown user? Is possible you have a user created because and exploit (maybe you miss some patch).

[DarkRIDDeR]

Yes,there are suspicious users. Can I delete all but the admin?

Scrin https://yadi.sk/i/PweLCPtz3LNTUr

[Damian Culotta]

All those accounts are fake.

You can delete or disable (if you aren't sure maybe is a better idea) all those accounts for sure.

[DarkRIDDeR]

Thanks, did as you said!