My site was hacked with a script that modifies the .htaccess file. It affects every domain on my VPS server. It redirects my sites to a Russian site. I change the .htaccess file back, it works fine for a few minutes, then it gets changed again within minutes and redirects to the Russian site. From what I have found online, it is a single .php file placed somewhere in a folder on one of my domains that is causing the problem. I’m looking for someone who can locate this hack and fix this problem.
