Download
2016-12-09, 02:19:52
It would not "cost enormous money"
send me a archive backup and I would find it in 2 minutes
For it to be redirecting there is probably some kind of injected code somewhere, and it might have come from his own webhost and not GS, could be a shared host hack.
Either way , GS can be completly removed and reinstalled from scratch, only thing you need to keep is the data/ folder
and the website.xml or just reconfig the site.
only thing you need to check is data folder
custom themes may also be infected if you can not reinstall it, it might need to be cleaned.
Most likely cause, is dns hijacks and not the site, but the site is down so you cannot confirm if it was a http redirect or what.
Site seems to be down and problem went away , so maybe an htaccess injection outside of GS even.
send me a archive backup and I would find it in 2 minutes
For it to be redirecting there is probably some kind of injected code somewhere, and it might have come from his own webhost and not GS, could be a shared host hack.
Either way , GS can be completly removed and reinstalled from scratch, only thing you need to keep is the data/ folder
and the website.xml or just reconfig the site.
only thing you need to check is data folder
custom themes may also be infected if you can not reinstall it, it might need to be cleaned.
Most likely cause, is dns hijacks and not the site, but the site is down so you cannot confirm if it was a http redirect or what.
Site seems to be down and problem went away , so maybe an htaccess injection outside of GS even.
