I was hacked, Now I must reinstall Wordpress

M

Michlap

Regular Member
Joined
Aug 5, 2014
Messages
409
Reaction score
18
I was hacked and need to reinstall wordpress

Can I do this from scratch or do I need to save some folders from the file manager in cpanel?


If i do it from scratch/manually i will just save each individual post on a word doc and reupload with same permalink names for seo - this will work? Or any better ideas?
 
Advertise on BHW
Does your host have RS1? It restores your page. You can then ask your host to scan your site for any exploits and install iThemes Security to do a scan and better secure your site in the future.
 
everythingred said:
Does your host have RS1? It restores your page. You can then ask your host to scan your site for any exploits and install iThemes Security to do a scan and better secure your site in the future.
Click to expand...

they can't help me
 
Wat happened? You probably don't need to re-install everything.. You could get someone to clean it up for you. I have had problems with one of my site in the past and had someone to fix it.. I still have his contact if you need. I remember him charging around $150 or so.
 
You shouldn't have to do a full restore. You could just remove the bad files replace the ones that you need. Then make sure all plugins are updated as well as wordpress.

If the host cant help you I might recommend looking for a new one.
 
The problem is the hacker created web pages on my website that i cannot delete and they lead/redirect to a microsoft illegal download. The hacker has also linked to my site using "micrsoft" anchor text etc
 
Michlap said:
The problem is the hacker created web pages on my website that i cannot delete and they lead/redirect to a microsoft illegal download. The hacker has also linked to my site using "micrsoft" anchor text etc
Click to expand...
They may have inserted something in your Database or may have edited an existing core file.
You'd have to delete EVERYTHING anyway. What happens when you visit a page? You get redirected or they have completely separate pages that redirect to their site? If so, what is the URL structure?
--
I too was hacked once (check my previous threads).
Remember this: Reinstalling only the hacked site won't always help if you've many sites in your hosting account.
When I was hacked, hacker had planted backdoors in three different directories of my hosting account. These backdoors could be used by the hacker(or any normal person who knew the URL) anytime to upload any file to any directory of my account.
So, check each and every directory carefully and open all the files which were modified recently and check for suspicious codes. (use Filezilla to sort files and directories by modified date)
 
ePrime said:
They may have inserted something in your Database or may have edited an existing core file.
You'd have to delete EVERYTHING anyway. What happens when you visit a page? You get redirected or they have completely separate pages that redirect to their site? If so, what is the URL structure?
--
I too was hacked once (check my previous threads).
Remember this: Reinstalling only the hacked site won't always help if you've many sites in your hosting account.
When I was hacked, hacker had planted backdoors in three different directories of my hosting account. These backdoors could be used by the hacker(or any normal person who knew the URL) anytime to upload any file to any directory of my account.
So, check each and every directory carefully and open all the files which were modified recently and check for suspicious codes. (use Filezilla to sort files and directories by modified date)
Click to expand...


they have created completed seperate pages that I can only find when i go to site:yourdomain.com in google. The URL structure of these pages is mywebsite.com>miscrosoftdownload.

So, if i have to delete everything, I can't copy the wp includes folder over to the new install?
 
Should reinstall manually again and choose only trustworthy plugin or your site will be hack the second time.
 
june007 said:
Should reinstall manually again and choose only trustworthy plugin or your site will be hack the second time.
Click to expand...

So annoying for images, outbound, inbound links etc
 
If you have to reinstall then export your content from Wordpress admin then save your uploads folder.
Export any theme settings from admin.
Also keep your old theme folder just in case you had made any customisations
take note of your permalink settings as well from in admin, because you want to keep all your urls the same.
 
If you can access your wp dashboard you can make a backup from Tools -> Export
Once you reinstall your WP, you can do the opposite, Tools -> Import
http://i.imgur.com/K0UDm3h.png

This way you will have all your pages and posts restored. However if you posts and pages contains media (images) you will need to make a backup for them and restore them later from FTP/File manager. Make sure you know in which folder you host those media. If you upload images from the WP create new post usually it will be on Wp-Content -> Uploads folder.

If you can't access your WP dashboard, you need to back up and restore from the database (phpmyadmin).

Note: After you export/backup, don't uninstall the previous WP right away. Instead, create a new WP installation on a subdomain for example. Restore your previous backup there, make sure everything works fine. Then you can proceed with the entire uninstall - reinstall process.
Make sure to make a note on other settings like mentioned by davids355 above.
Good luck!
 
Last edited:
Before you do anything backup your instillation and your database, are you sure you have to do that? you can install WordPress Security Plugin | Wordfence and see if it can identify the problem for you?
Code: 
https://www.wordfence.com/
 
Just do a full reinstall but remember to backup the database. Also, your host sounds like a prick. Spend a few more bucks, get a better one. What kind of host doesn't help its own customers/clients? You're paying him for everything, not the other way around. Slap the lil noob. Change it, and be careful of what plugins you download.
 
There are some security / hack proof plugins in wp. Might want to try that.

make sure to keep a db backup on your pc/pendrive, just in case.
 
Export your database with a plugin and upload it again
 
reinstall manually again and choose only believable plugin buddy
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top