Am I hacked?

matrix79 · Apr 1, 2015

So I open my homepage - everything is great.
I click through the link to my last post and... no content. Stuck? I try to reload page. No success. Tried second time and that's when it started to download something! I immediately cancelled the download.

I can't find anything suspicious so far although I don't really know where to look. I couldn't replicate the issue again in different browsers or computers.

No warnings in Google search results next to my links or in my GWT.

I scanned with free Sucuri plugin and it says it's all clean.

What should I do? Where to look for the problem?

I never dealt with hacked websites but I am not technically challenged.

Thanks in advance.

Visit · Apr 1, 2015

I use wordfence, it can scan and show you how to fix the problem.

jamie3000 · Apr 1, 2015

Try emptying your cookies and see if it tries to download again

matrix79 · Apr 1, 2015

Wordfence didn't find anything either. And it doesn't do this anymore. Strange...

ADLUDUM · Apr 1, 2015

Get MalwareBytes and Avast Security and do a scan

and get PeerBlock.

Inabox · Apr 1, 2015

Are you using a nulled theme or plugin? Or a theme or plugin you downloaded from a website that shares themes or plugins? If so, you need to redo your entire website, as 99% of nulled themes are infected.

Run a scan on your computer, it could be something on your computer and not your actual website. Run malwarebytes, virus scan, and if anything pops up, run a deep root scan, that scans for viruses before your operating system loads (this will take probably 24 hours)

If you have any toolbars, sketchy addons for chrome, disable them all. Clear your cookies/cache/flush dns, and see if you can replicate the error.

If you have a VPS, see what your website looks like on there....if you dont have a VPS, find a free trial one and see what it looks like on there.

herotest · Apr 1, 2015

Clear your history and cash and check it

matrix79 · Apr 1, 2015

Inabox said:
Are you using a nulled theme or plugin? Or a theme or plugin you downloaded from a website that shares themes or plugins? If so, you need to redo your entire website, as 99% of nulled themes are infected.

Run a scan on your computer, it could be something on your computer and not your actual website. Run malwarebytes, virus scan, and if anything pops up, run a deep root scan, that scans for viruses before your operating system loads (this will take probably 24 hours)

If you have any toolbars, sketchy addons for chrome, disable them all. Clear your cookies/cache/flush dns, and see if you can replicate the error.

If you have a VPS, see what your website looks like on there....if you dont have a VPS, find a free trial one and see what it looks like on there.

No, I don't use anything nulled. Complete system scan didn't find anything. I had Chrome addons but they are gone now. The site behaves normally. It only happened once but it still did happen!!! I wasn't hallucinating, were I

Cleared cookies, history -- everything looks OK. Switched computers and browsers -- normal site. I could never replicate the issue.

cthulchu · Apr 1, 2015

hmm... Okay...

It was one time glitch of the web-server. Wanna know what exactly it was? Read your browser and your web-server low-level logs. Don't wanna use logs? forget about it until the next encounter.

No, site wasn't hacked, it's a normal issue. Yes, I'm sure. No, the file you were downloading was either the .html or .php file that a little confused web-server tried to give you.

Cheer up!
Have an ice cream.

jamie3000 · Apr 1, 2015

matrix79 said:
No, I don't use anything nulled. Complete system scan didn't find anything. I had Chrome addons but they are gone now. The site behaves normally. It only happened once but it still did happen!!! I wasn't hallucinating, were I

Cleared cookies, history -- everything looks OK. Switched computers and browsers -- normal site. I could never replicate the issue.

Apache could of had a weird moment and served you the page as a download I suppose, things like that can happen. I've had it just dump out php randomly instead of running it once

Am I hacked?

matrix79

Junior Member

Visit

Senior Member

jamie3000

Elite Member

matrix79

Junior Member

ADLUDUM

Junior Member

Inabox

Newbie

herotest

Junior Member

matrix79

Junior Member

cthulchu

Newbie

jamie3000

Elite Member

Main Menu

Marketplace

Making Money

BlackHat World