1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

I think somebody hack my site. Please help !!

Discussion in 'White Hat SEO' started by keywordspot, Jun 28, 2014.

Thread Status:
Not open for further replies.
  1. keywordspot

    keywordspot Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 17, 2013
    Messages:
    4,299
    Likes Received:
    1,481
    Gender:
    Female
    Occupation:
    contenu visuel
    Location:
    At Hill Station
    ---- THREAD CLOSED 06/28/2014 ----
    Hello guys,

    I started infographics community. Today I can see site:***.com on google, really shocked unexpected auto pages created and redirect to another site. How is it possible. ? Please check screenshots

    Pic 1:
    [​IMG]

    Pic 2: Redirect to another site:
    [​IMG]


    I'll check my wordpress and hosting too. There is no footprints to create this pages. How to solve this issue ? Please guys help me...
     

    Attached Files:

  2. keywordspot

    keywordspot Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 17, 2013
    Messages:
    4,299
    Likes Received:
    1,481
    Gender:
    Female
    Occupation:
    contenu visuel
    Location:
    At Hill Station
    If I Change it solve this issue. ?? Are you sure 100% ?

     
  3. Aty

    Aty Jr. VIP Jr. VIP

    Joined:
    Jan 27, 2011
    Messages:
    5,411
    Likes Received:
    3,699
    Home Page:
  4. ibmjango

    ibmjango Jr. VIP Jr. VIP

    Joined:
    Jul 3, 2010
    Messages:
    252
    Likes Received:
    74
    why dont you tell your hosting company to fix it as its hacked so they will clean this up for you.
     
  5. keywordspot

    keywordspot Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 17, 2013
    Messages:
    4,299
    Likes Received:
    1,481
    Gender:
    Female
    Occupation:
    contenu visuel
    Location:
    At Hill Station
    Oka. I'll talk to her and solve. Above bankofamerica said change password. If I change it. Solve this issue. Can you tell me..

     
  6. Aty

    Aty Jr. VIP Jr. VIP

    Joined:
    Jan 27, 2011
    Messages:
    5,411
    Likes Received:
    3,699
    Home Page:
    Changing your password is not gonna remove those pages from your website.
     
  7. keywordspot

    keywordspot Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 17, 2013
    Messages:
    4,299
    Likes Received:
    1,481
    Gender:
    Female
    Occupation:
    contenu visuel
    Location:
    At Hill Station
    Bro, Thanks man. Which password ? Hosting or Wordpress? I'm 100% sure I've check my FTP there is no sub directories. Like: frens

    That's y worry about this. Are you faced like this?
     
  8. ibmjango

    ibmjango Jr. VIP Jr. VIP

    Joined:
    Jul 3, 2010
    Messages:
    252
    Likes Received:
    74
    see there must be a script or pages install in your file manager , you can check it through cpanel or ftp, if you are still unable to figure out those malecious code then better to ask your hosting company to take backup of your site or i guess they have some backup already (as most of company takes backup) so ask them to restore your site again, its like system restore ..depends if you asked them to take backup on your behalf ... even if you didnt told them to take back up still lock a support ticket i m sure then can sort this out for you, i had same problem on vps server, and most of time support sort everything out for me.
     
  9. lord1027

    lord1027 Elite Member

    Joined:
    Sep 20, 2013
    Messages:
    3,174
    Likes Received:
    2,222
    Are you using a Wordpress nulled theme/plugin? If so, the problem is obvious.
     
  10. Gogol

    Gogol Elite Member

    Joined:
    Sep 10, 2010
    Messages:
    3,066
    Likes Received:
    2,872
    Gender:
    Male
    Would you be interested in professional help? Pm me if you are :)
     
  11. leobar

    leobar Regular Member

    Joined:
    Mar 9, 2013
    Messages:
    267
    Likes Received:
    133
    Location:
    At Jenifer' office
    change your wp and hosting pass word.
    generally the script is implemented on your editor of the wp.
    delete it.
    changing the password will not remove the script, but will prevent it from being reimplemented.
    is your hosting a re-seller? that kind of shit happens if you buy from a re-seller and he did not know how to prevent it (happened to me in the past, some nice redirect implemented on header and every page reidirected to some link. deleted it and changed pass + hosting)
    to prevent future shit, backup weekly your site.

    wish you the best.
    Leobar!
     
  12. keywordspot

    keywordspot Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 17, 2013
    Messages:
    4,299
    Likes Received:
    1,481
    Gender:
    Female
    Occupation:
    contenu visuel
    Location:
    At Hill Station
    Oka. Thank You for Advice. I'll Check again and remove it. Else I contact to hosting provider.

    Nulled ?? I don't mean. Currently using Inspire Version 10.1 buy from themeforest. And then another shocked I had seen 25k backlinks between Jun 23 - persent . Below mentioned screenshot. How to remove that too? Please tell me suggest bro.

    [​IMG]

     
  13. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    Check the .htaccess file in the root directory of the WP install, see if there are some added extras in there.
     
  14. upstarter

    upstarter Regular Member

    Joined:
    Apr 29, 2014
    Messages:
    332
    Likes Received:
    43
    Oh boy, that's going to be a lot of work...
     
  15. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    I would scan your home computer as well - if you have a keylogger on your box they will get your password every time you change it.
     
    • Thanks Thanks x 1
  16. qrazy

    qrazy Senior Member

    Joined:
    Mar 19, 2012
    Messages:
    1,113
    Likes Received:
    1,712
    Location:
    Banana Republic
    Make sure you don't use any outdated plugins or those nulled themes/plugins. If you've enabled WP registration disable it. Same thing if you're using WPMU, disable any new registrations. Also compare the original files(WP installs, themes, plugins)with the ones on your server to see if there any new code injection and remove them.
     
  17. keywordspot

    keywordspot Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 17, 2013
    Messages:
    4,299
    Likes Received:
    1,481
    Gender:
    Female
    Occupation:
    contenu visuel
    Location:
    At Hill Station
    PM You with so many questions. Please guide me asap.

    Right now I'll change WP Password. I don't know change password from hosting and domains too. Where can i see that type script on WP. Could you tell me please?

    oh!! Currently 'm using Hostgator Business Plan.
    I Can't see .htaccess file anything like that on root directory.
     
  18. leobar

    leobar Regular Member

    Joined:
    Mar 9, 2013
    Messages:
    267
    Likes Received:
    133
    Location:
    At Jenifer' office
    if you have done proper SEO, you can easily disavow the "bad" links and keep the "good" ones. if you have done any crappy seo, then you are screwed, you cant disavow because u will get caught so only thing to do is removing em one by one by contacting site owners. (not everyone will remove) and dont forget to be gentle when asking to remove links or they will not.
    option B is adding more juicy links so you reverse neg seo done to you.

    i would go for disavow or adding more links. removing all the links is a pain in the @ss.

    best wishes.
    Leobar!
     
  19. myfault

    myfault Power Member

    Joined:
    Sep 21, 2012
    Messages:
    636
    Likes Received:
    121
    Immediately check the viruses on your site through sitelock. They have 30 days trial.
     
  20. keywordspot

    keywordspot Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 17, 2013
    Messages:
    4,299
    Likes Received:
    1,481
    Gender:
    Female
    Occupation:
    contenu visuel
    Location:
    At Hill Station
    Bro, Yeap. You're right I enabled WP registration. And make sure nothing outdated plugin never use it. Normally, Yoast, Google Analytics, Hellop Bar thats it.


    And make sure as you said I've check complete files. There is no Injection codes.

     
Thread Status:
Not open for further replies.