Wordpress and hack solutions

[Designventures]

Hi
Couple of my sites are hacked and got malwares Trojans etc

I know backup restore is one solution but thats not an option in my case

How do I fix the hack? Can somebody guide in detail please ?

I have 600 posts so what do I do? If I export and import post in new Wp, will I get malware/Iframe injection on new site?

Need help badly....

Thanks

 

[fmOzilla]

http://www.blackhatworld.com/blackh...uide-secure-your-wordpress-website-howto.html

 

[Designventures]

Thats preventing the hack.... Any help on fixing it?

 

[jazzc]

I have 600 posts so what do I do? If I export and import post in new Wp, will I get malware/Iframe injection on new site?

That should do the trick.

Nevertheless, if you have an insecure (or trojaned by design) plugin/theme, you may be hacked again.

 

[Blackberry_11]

If you have complete idea about wordpress and its files and functions then you can do that easily. Only thing that you need to do is make sure that you only keep the necessary files and delete the other files that are not necessary.

 

[blackhacik]

Maybe change password and not save password in Total Commander. Passwords are not safety there

 

[MatthewWoodward]

Have a look in your index.php and wp-config.php and see if there is any malicous code present.

Often it is buried right at the bottom of the files with lots of blank space to try and hide it a bit.

 

[SEO Sage]

There is a website scanner that is online (I don't have the link on hand sorry), but it will tell you what files are infected. Also if you type "security" into plugin search from within your wp admin, or just on wordpress.org, you will find a few good plugins that test and report for you. I just cleaned a few sites for past clients where a subordinate newbie forgot to properly set permissions in chmod... I quickly fixed what I could and then asked the hosting support to fix the rest. It is all quite simple once you know what to do! Good luck!

 

[MatthewWoodward]

There is a website scanner that is online (I don't have the link on hand sorry), but it will tell you what files are infected. Also if you type "security" into plugin search from within your wp admin, or just on wordpress.org, you will find a few good plugins that test and report for you. I just cleaned a few sites for past clients where a subordinate newbie forgot to properly set permissions in chmod... I quickly fixed what I could and then asked the hosting support to fix the rest. It is all quite simple once you know what to do! Good luck!

I believe this is what your talking about http://wordpress.org/extend/plugins/exploit-scanner/

Not sure why I didn't think of that =D Long day....