I've been hacked need help

[markantos]

My site has been hacked for sure.

In google search it shows some things like top quality essay, essay for education etc pages that don't exist. But they are all over the searches.

Please help me out here.

How do I fix this? I'm using WP.

 

[Adrian112]

Check your theme files, use theme authencity checker, if you know something about code check it, check for pages and posts with these keywords

 

[markantos]

Thanks Adrian for that. But checking themes but I'm still worried about it being in the database. What's the process of having the same database and starting fresh when you think the database has been corrupted? Is there a database cleaner you know about?

 

[Conor]

Thanks Adrian for that. But checking themes but I'm still worried about it being in the database. What's the process of having the same database and starting fresh when you think the database has been corrupted? Is there a database cleaner you know about?

Focus on the database later.

Remove/Replace your wp-admin and wp-includes files with clean copies from wordpress.org
Do the same with the files in the root directory, minus your wp-config.php file

Install this plugin, and let it scan your whole site: https://wordpress.org/plugins/gotmls/

The plugin will usually be able to clean your site of most malware, provided you aren't using potentially risky nulled themes.

If you're still worried about it being hacked, do a backup of your content (tools > export) and just install a new WP site from scratch. I wouldn't go that far though.

 

[markantos]

Conor I'm seeing its giving me issues in my plugins nearly all of them. Does it clean or should I uninstall these plugins. I have 5 plugins with issues.

 

[Conor]

Conor I'm seeing its giving me issues in my plugins nearly all of them. Does it clean or should I uninstall these plugins. I have 5 plugins with issues.

It should give you an option to clean the infected files.

 

[markantos]

It should give you an option to clean the infected files.

thanks then let me wait until its done. Then I'll ask again.

By the way since the urls are already indexed, do i have to do anything in google console?

 

[Conor]

If Google has detected the malware, then yes. Once it's done, just tell Google that your site is now clean.

If it is, it'll remove the "This site may be harmful" warning.

 

[craigc0302]

Securi.net is a good offering for anyone who has been hacked, they clean it up for you. Use them, or restore a copy of your website to before the hack took place and make it more secure

 

[Couch Monkey Media]

ask your web host as well. A lot of times they can run a scan from the server side find the files and disable them for you.

 

[DoctorGeek00]

My site has been hacked for sure.

In google search it shows some things like top quality essay, essay for education etc pages that don't exist. But they are all over the searches.

Please help me out here.

How do I fix this? I'm using WP.

Do you have any backup? You can also contact your hosting provider. Basically reputable hosting provider keep your backup. You can try to contact them. To avoid this problems again, I would recommend you to periodically backup your site. Here are some tips that you can follow to secure your wordpress site. I also read this documentation:

- http://windowswebhostingreview.com/oh-dam-my-wordpress-site-has-been-hacked/
- http://windowswebhostingreview.com/how-to-identify-that-your-wordpress-site-is-hacked/

You can read the above documentation, it is very clearly.

 

[markantos]

Thanks to all of your comments and suggestions.

The problem was actually not on my server but on a clients and for the life of me dealing with an already hacked site was something I had not encountered before.

This is what happened.

I used the gotml plugin and all of a sudden the client got a resources expired suspension. It was hostgator, you know how they love forcing you to buy dedicated servers. So we contacted them and pleaded to allow the site to be up for just 2 hours as we sorted the problem. lol

Once they did that, we moved it to our server

Then ran gotml again....Silly mistakes like downloading "free" themes cost this client 3 weeks of business.

Lesson learned

1. Stop using "free" premium plugins and themes
2. Please avoid hostgator and any ecw hosting
3. use gotml and contribute to the fellow
4. Use secure hosts.....Funny but most are actually called blackhat by others...

Thanks again guys.

 

[W9go]

one and two makes good sense.
great to read this here to create awareness.....i check my WP pages and removed all plugins which i am not 100% sure about...

 

[Sristy]

First and foremost, take the help of your host. Most webhosts are nice and they would get your files cleaned.

If they don't agree to do this, then take a backup of your database and do a reinstallation of wordpress, that is the best solution if you do not want to spend money on getting this repaired. Else there are lots of options available online which does, some are even available on fiverr worth taking a look at.