Freezerburn
Registered Member
- Jan 17, 2012
- 63
- 8
I'm on JustHost too. Most of my sites got hacked but nothing as bad as yours. I downloaded my sites and scanned them with malware bytes which flagged a bunch of files which I deleted. Seemed to fix it. Now I backup my sites regularly. What a pain.
alex-19841
Regular Member
- Jan 3, 2010
- 318
- 212
Use PHP antivirus software that will show what files were edited, deleted, added etc.
The one I found that works well is "ZEOS ANTIVIRUS" but its in Russian.
The one I found that works well is "ZEOS ANTIVIRUS" but its in Russian.
Move your config files away from the standard installation folder and redirect to the parent's folder:
a) It wouldn't be a typical installation 90% scripts give up
b) you can change mode to rx- only (read only) this prevent for changing
ps php as a server-site scripts has had access to whole your account space (so no problem if links are correctly changed)
I had situation last year that competitors hack my client www account (on joomla) I changed directory. This prevent hacking - they just try
a) It wouldn't be a typical installation 90% scripts give up
b) you can change mode to rx- only (read only) this prevent for changing
ps php as a server-site scripts has had access to whole your account space (so no problem if links are correctly changed)
I had situation last year that competitors hack my client www account (on joomla) I changed directory. This prevent hacking - they just try
It got traced back to Sharjah University in UAE. I also live in UAE so maybe they just got all domains registered in that country and hacked it for fun.
Also i exported all the posts and comments from WordPress then got JustHost to wipe my account. After that I added all my domains and subdomains back and installed the latest wordpress on them. Then i imported the posts, comments , categories and installed my sidebar and security widgets.
Also i exported all the posts and comments from WordPress then got JustHost to wipe my account. After that I added all my domains and subdomains back and installed the latest wordpress on them. Then i imported the posts, comments , categories and installed my sidebar and security widgets.
Last edited:
IanV
Regular Member
- Jul 24, 2011
- 493
- 170
I have the same situation. everytime I type my website on google it will show up results but when i click on the links it will say that the site is potentially dangerous. when I check the address bar the site is a .ru so i can assume its from russia. I scanned my pc no virus and the like. So should i contact my host service.? I am using brainhost by the way.
IanV
Regular Member
- Jul 24, 2011
- 493
- 170
I contacted my webhost and they were able to note that there is a 301 redirect going on in my site. I did not do any 301 redirect as I am not aware of it. So they created a ticket. Hopefully once this issue is resolved I should see impression again for this website. This is perhaps is causing for my website to drop in serps all of its keywords.. I was thinking my site was sandboxed but now I don't as I see that this is the real issue.
Also ran a couple of test usng the tools above and have sown a positive 301 redirect to a russian site. Why the heck are they going to do that.
Also ran a couple of test usng the tools above and have sown a positive 301 redirect to a russian site. Why the heck are they going to do that.
Download FileZilla and log in to your FTP ( Check youtube/google for tutorial ) then in FileZilla go to public_html and go to your site folder ( can be any name * a name you set * ) example BlackHatWorld for blackhatworld.com then click on sort by date modified and right click and press edit on the ones edited on the day and before the day of being hacked.
Open with Notepad and in the options - Find - Type russian site name and press find and then remove that text. DO NOT REMOVE INVISIBLE TEXT AROUND IT AS IT IS THE ORIGINAL SCRIPT. Press save
Do this for all your website folders. Also do this for the root of your ftp and now try to access site through facebook / twitter.
If this does not work then make a full backup of your site and download it. Then go to your wordpress accounts and click on export ( Pics and Vids uploaded to server will be lost but if you linked to another site it will stay )
Now send an email to host to wipe your account and after they do that add your sites and install wordpress again. Than upgrade Wordpress, install the security apps posted by bhw members above , then go to tools - import and then import the posts. You can also install your theme and other plugins manually later.
-------------------------------------------------------
Does not work? Upload your backup file ( ask them to do it ) and then appoint a security service to fix it and keep track on it ( Yearly/monthly subscription )
Scanned with ESET 5 50 times
The first thing I would do is change host , change db passwords, and check the write permissions on files.
Then I would also check my computer for any viruses , but just format it to be sure. When I was first starting I got your problem and I found out that they also hacked my PC, and the website .
You don't need any backup buddy, just download your database, and upload it to the new host. Then edit it in phpmyadmin if there are any problems left. But I would look for another username created in there. because sometimes they create another user in wordpress.
Then I would also check my computer for any viruses , but just format it to be sure. When I was first starting I got your problem and I found out that they also hacked my PC, and the website .
You don't need any backup buddy, just download your database, and upload it to the new host. Then edit it in phpmyadmin if there are any problems left. But I would look for another username created in there. because sometimes they create another user in wordpress.
JonnyBorneo
Regular Member
- Feb 7, 2012
- 388
- 97
very bad karma or voodoo jinxx
I added all information on half of my sites and they get 1000% more unique traffic than they used to get now! ( Also my sites are not selling anything and im giving useful unique information so people are re visiting my sites !)
I got hacked again ( One site ) ! After Full Clean Install with the plugins.
MY other sites are fine but now it links to http://www.joblist-id.com/2012/02/promo-member-alfamart-minimarket-lokal.html
MY other sites are fine but now it links to http://www.joblist-id.com/2012/02/promo-member-alfamart-minimarket-lokal.html