In a new volume of the series "Tales Of The Hijacked Blogger Blogs", today we have multiple reports of blogs redirecting to "hijriah.jentayu.com/hijriah.php".
This tale is somewhat less exciting than the previous episodes in this long saga, however. The problem code, which is causing the hijacks, typically appears in various HTML gadgets, and is not difficult to find. The code appears to consist of simple HTML gadgets, intentionally installed by the blog owners.
You'll probably not find this hack by editing the template HTML code - it will be an HTML gadget, located in your sidebar or maybe the blog footer / attribution section.
If you use a text only proxy, like the Rex Swain HTTP Viewer or the Web-Sniffer View HTTP, you can retrieve the blog in safety. Then, do a simple text search on "hijriah.jentayu.com". You'll find something like
See the Title of the gadget above? If you title your gadgets, it's easy enough to find.
Having identified the offending code, use "Page Elements" and delete the HTML gadget. And be more selective, when choosing third party code.
>> Top
This tale is somewhat less exciting than the previous episodes in this long saga, however. The problem code, which is causing the hijacks, typically appears in various HTML gadgets, and is not difficult to find. The code appears to consist of simple HTML gadgets, intentionally installed by the blog owners.
You'll probably not find this hack by editing the template HTML code - it will be an HTML gadget, located in your sidebar or maybe the blog footer / attribution section.
If you use a text only proxy, like the Rex Swain HTTP Viewer or the Web-Sniffer View HTTP, you can retrieve the blog in safety. Then, do a simple text search on "hijriah.jentayu.com". You'll find something like
</div><div class='widget HTML' id='HTML7'> <h2 class='title'>.:: Today ::.</h2> <div class='widget-content'> <script src="http://hijriah.jentayu.com/hijriah.php"> </script> </div>
See the Title of the gadget above? If you title your gadgets, it's easy enough to find.
<h2 class='title'>.:: Today ::.</h2>
Having identified the offending code, use "Page Elements" and delete the HTML gadget. And be more selective, when choosing third party code.
>> Top
Comments
No, I do not think that "reverting widget templates" will remove an entire HTML gadget.
We are going to have to help by identifying the gadgets for them, when they tell us the blog names. And they will have to use "Page Elements" and delete the gadgets.
thanks for helping me back there.. i really appreciate it :)
i got my blog back.. thanks for the info! :)
that jentayu has been deleted
ALHAMDULLILAH i got back my blog once i remove the code.
Until we figure out what is going on here, you're better off just deleting the gadget, and leaving it deleted.