1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Chinese spam all over my homepage when I find result in google serps WTF

Discussion in 'Black Hat SEO' started by Mountain Man, Jan 19, 2017.

  1. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    Recently my site was hacked, thought I have got them out of it but maybe not, my site started dropping in ranking and then when I went to where my rank tracker said my page is I see a bunch of non English characters.

    Anyone know of any guides online to root someone out of your system? thanks a lot.

    My hosting company said nobody had accesed my cpanel so that is good but damn I have got to fix this quick.

    Thanks for any help here
     
  2. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    I see this as my title now in serps

    but when I go to my actual homepage it looks the same , not sure what to make of this
     
    Last edited by a moderator: Jan 20, 2017
  3. MahdiSouri

    MahdiSouri BANNED BANNED

    Joined:
    Dec 12, 2015
    Messages:
    90
    Likes Received:
    7
    I had a same issues :(
     
  4. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    For what its worth google translate says its Japanese not Chinese
     
  5. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    Were you able to clean up your site?
     
  6. MahdiSouri

    MahdiSouri BANNED BANNED

    Joined:
    Dec 12, 2015
    Messages:
    90
    Likes Received:
    7
    No :(
     
  7. virtualpurity

    virtualpurity Jr. VIP Jr. VIP

    Joined:
    Nov 12, 2012
    Messages:
    855
    Likes Received:
    495
    Occupation:
    SEO, Hosting
    Location:
    /root
    Home Page:
    If they haven't accessed your cpanel they could still have access to your website and files through shells and various other tools.

    You need to harden your website and hosting, you need to do a full file scan to see if anything comes up.

    Check also htaccess file or other common files (index files) for hidden website redirects.

    Its is also very possible that your account is not infected at all if the main hosting server is compromised. ( I doubt they would tell you if this happens ).

    Anyway Good luck recovering your rankings.
     
    • Thanks Thanks x 1
  8. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    Ok I will try and check these out, I feel like I should go to the local college and find a tech savy student asap ... I tried restoring an older version from my wordpress and having google fetch it again but no luck it still shows the same stuff, Its weird when I type in address I see everything normal but when google fetches it is sees a ton of Japanese
     
  9. Jason Bradbury

    Jason Bradbury Power Member

    Joined:
    Oct 18, 2016
    Messages:
    668
    Likes Received:
    84
    Very helpful
     
  10. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    I am talking with host gator chat services now, they are trying to sale me on a manual clean for 400 bucks, shit
     
  11. royserpa

    royserpa Jr. VIP Jr. VIP Premium Member

    Joined:
    Sep 28, 2011
    Messages:
    4,986
    Likes Received:
    3,744
    Gender:
    Male
    Occupation:
    Negative Options aka Rebills!
    Location:
    Exploiting Loopholes!
    Home Page:
    Hostgator is your hosting provider?
     
  12. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    installed wordfence plugin and started a scan . I saw from a google search that someone had a similar issue and wordfence helped them clean it out
     
  13. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    Yes
     
  14. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    So I downloaded and installed the free wordfence plugin and ran a scan, within about 15 mins it seems to have fixed the entire site. If you dont have it I highly recommend it.

    @MahdiSouri download wordfence and run a scan, it was very painless
     
    • Thanks Thanks x 1
  15. virtualpurity

    virtualpurity Jr. VIP Jr. VIP

    Joined:
    Nov 12, 2012
    Messages:
    855
    Likes Received:
    495
    Occupation:
    SEO, Hosting
    Location:
    /root
    Home Page:
    Plugin looks good enough, congrats on getting your website back.

    Can i ask what did the wordfence scan find ? How was your website infected ?
     
  16. BharaTV

    BharaTV BANNED BANNED

    Joined:
    Jan 15, 2017
    Messages:
    67
    Likes Received:
    12
    Gender:
    Male
    Wordfence wont help.It will just clean the infected files however you have an old plugin which is vunderable.
    I had the same problem with one of my main websites which is high authority.It got hacked like each month infected with some shit to create thousands of subsites with their crap using my websites authority to rank quickly high.
    I had to hire someone from freelancer who actually found the issue.It was a plugin a programer used when creating my website where he didnt buy a license for it and it was not patched to newest version.I dont remember the name but it was for sliding pictures in the mainpage.They got through this plugin into my system where they always implemented their crap.
     
  17. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    @BassTrackerBoats any chance of editing out my post of the Japanese characters further up thread and AsifWILSONKhan as well so it does not include my site imformation.

    Thanks for pointing that out Asif, I will create a new sitemap and make continue to monitor it. Was not as cleaned up as I thought
     
    • Thanks Thanks x 2
  18. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    Not sure if they will regain access, but it has helped for sure. I will update this thread as I hopefully get it all cleaned up. they have a firewall as well which I went ahead and activated, Its in "watch" mode now and will activate after about a week. I did have many plugins as well as themes from word press that were all about 2 years without any updates, Wordfence notified me off all those that needed to be updated
     
  19. Mountain Man

    Mountain Man Junior Member

    Joined:
    Mar 17, 2015
    Messages:
    183
    Likes Received:
    50
    As I am sure you already know you are right on. They are still in my system for sure, I have a plugin very similar to the one that you mentioned and also had a freelancer design the site so I will look into that.

    and thank you mods for cleaning up my previous post.

    @BharaTV Was the plugin Revolution slider? I see looking at it that it is a premium plugin which I highly doubt was paid for in a legit manner.
     
  20. bismarck88

    bismarck88 Junior Member

    Joined:
    Sep 19, 2008
    Messages:
    114
    Likes Received:
    14
    Gender:
    Male
    Location:
    Vancouver
    Home Page:
    Good luck with securing your website and cleaning up your site