Greetings,
I use ModX 2.XX Evo and would be really appreciated if someone helps me to get rid of the "spam redirecting".
mysite.com/text-message-spy-iphone redirects me to a spammer's web-site:
http://www.mspyapp.com/?aff=3781 (or to a spammer who as registered as an affiliate with 3781 id for mspyapp.com site)
I've analyzed the spammer url using Chrome Developer Mode, and discovered that the below pages are invokes in the following order
mysite.com/text-message-spy-iphone
mysite.com/home?getjs=metric.js
window.location = '
http://keycollector.pw/go.php?sid=7';
However I can't find the "getjs" or "metric.js" across the ModX files to remove the malicious code.
Any advice would be appreciated.
