Hmmmmm hacked

[thedarkest12]

OK, so I may have a background in SEO, but hacking is not my bag...

One of my sites, when you follow a link from Google Organic Search is redirecting to some spammy s**t website.

Don't know who the wise guy is but the .htaccess file looks intact. How else do these guys get in and what file should I be looking at fixing please?

 

[Razvan]

see which file on your site is the latest modified , and see if you can find something strange on code , like iframes and such stuff

also talk to your host to do a scan , they often helped me with such issues

 

[thedarkest12]

Thanks, looks like a base64_decode hack to all the php files...

 

[Tony Barns]

Who is your hosting provider? They might be able to remove that code for free because it will be spread out in all or most your php files. If it's a wordpress blog just re-upload the files.

Also remove and check anything you uploaded to the server recently, as they might have the back door in them.

 

[necro]

Pm me if you still need help

 

[pYraTe]

DETECTS malicious scripting on websites
http://www.unmaskparasites.com
and this one to detect any malicious hacks on website for link juicing and rootkits etc.
http://sitecheck.sucuri.net/scanner/

 

[max1234567]

thanks for these links pyrate, really useful

 

[Zarion]

just got hacked too

 

[meatro]

Weird... All my Joomla sites are just fine.

But yeah, this shit happens to WP all the time. Don't use it for anything important because if you are, then it's not as simple as you might believe it is.

 

[blackfrank]

The last time I got hacked was because my client set a real stupid username/password for FTP. I don't know if this is your case, though.

 

[dreess2012]

Really good, I also learned the next, I recently learned, thank you for sharing!

 

[paulcarter97]

Take help from your hosting. They will scan and tell you if there is any parasite, backdoor, malacious software ar any modified file that made the link redirect to that nonsence website. Or use checking software to scan files of your website.

 

[deekay619]

You guys never take your site's security seriously. A site is like a store, it brings food to the table. Leaving it unprotected is like having a physical store without a lock. Really now, how many of you perform routine security checks? I know that you're not security experts, but you can probably find a cheap security service on fiverr or something like that. You only wait until it's too late. By then your site is down, you're losing money and you're probably gonna end up paying someone to fix it. In the end it's gonna cost you a lot more than actually preventing these intrusions. Nowadays most sites are hacked by 13-year-olds with simple hacking programs, and for no apparent reason - just for the heck of it. Just take Havij for example. A brat can lay waste on hundreds of sites in a few hours with just that simple program.

 

[supermanden]

Is it possible to secure your blogspot website somehow?

 

[win292]

some of my sites got hacked too. Then which is the better way to protect your site??

 

[sureyea]

better consult your hosting service

 

[derfall]

I have fairly good instructions on my website as to how to secure a WordPress site. secure-your-website dot com. The $17 plug-in does add
another layer of security, but you'll do a good job of locking everything down if you scroll down to the link for "My Written Instructions" and
follow those instructions.

You only need enough skill to get into File Management in CPanel (I use Hostgator), and be able to find and activate plug-ins from Wordpress dot org. This is easy from within your WordPress site. It took me two weeks of studying two WSOs (Bulletproof and WP-Padlock), and some
YouTube videos to write it. If you have comments or can suggest additions, I'd love to read them.

 

[roster67]

Change your account password. Upgrade to lastest version if you are using a CMS. Contact your hosting provider to clean all your hosted files.

 

[Sente]

secure-your-website dot com, Bulletproof and WP-Padlock

AWESOME instructions in your text file!!!

On the sales page it says the plugin is only for NEW sites? Why and what do you mean by that?

 

[JanaSEO]

Change your pass to your WP, FTP, Cpanel, Hosting, everything..

Then look for the latest modified files and maybe even request your site to be reviewed from your hosting provider.