1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

I was hacked, Now I must reinstall Wordpress

Discussion in 'Black Hat SEO' started by Michlap, Apr 21, 2016.

  1. Michlap

    Michlap Regular Member

    Joined:
    Aug 5, 2014
    Messages:
    409
    Likes Received:
    18
    I was hacked and need to reinstall wordpress

    Can I do this from scratch or do I need to save some folders from the file manager in cpanel?


    If i do it from scratch/manually i will just save each individual post on a word doc and reupload with same permalink names for seo - this will work? Or any better ideas?
     
  2. everythingred

    everythingred Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 21, 2010
    Messages:
    2,171
    Likes Received:
    1,366
    Does your host have RS1? It restores your page. You can then ask your host to scan your site for any exploits and install iThemes Security to do a scan and better secure your site in the future.
     
  3. Michlap

    Michlap Regular Member

    Joined:
    Aug 5, 2014
    Messages:
    409
    Likes Received:
    18
    they can't help me
     
  4. LuckyCharm007

    LuckyCharm007 Jr. VIP Jr. VIP

    Joined:
    Jul 8, 2015
    Messages:
    1,918
    Likes Received:
    1,156
    Occupation:
    Affiliate Amazon Content Writer
    Home Page:
    Wat happened? You probably don't need to re-install everything.. You could get someone to clean it up for you. I have had problems with one of my site in the past and had someone to fix it.. I still have his contact if you need. I remember him charging around $150 or so.
     
  5. CenTex Hosting

    CenTex Hosting Jr. VIP Jr. VIP

    Joined:
    Nov 8, 2009
    Messages:
    2,173
    Likes Received:
    838
    Gender:
    Male
    Occupation:
    Founder/CEO
    Location:
    Austin, TX
    Home Page:
    You shouldn't have to do a full restore. You could just remove the bad files replace the ones that you need. Then make sure all plugins are updated as well as wordpress.

    If the host cant help you I might recommend looking for a new one.
     
  6. Michlap

    Michlap Regular Member

    Joined:
    Aug 5, 2014
    Messages:
    409
    Likes Received:
    18
    The problem is the hacker created web pages on my website that i cannot delete and they lead/redirect to a microsoft illegal download. The hacker has also linked to my site using "micrsoft" anchor text etc
     
  7. everythingred

    everythingred Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 21, 2010
    Messages:
    2,171
    Likes Received:
    1,366
    You should get a better host then
     
  8. ePrime

    ePrime Jr. VIP Jr. VIP

    Joined:
    Aug 16, 2014
    Messages:
    314
    Likes Received:
    117
    They may have inserted something in your Database or may have edited an existing core file.
    You'd have to delete EVERYTHING anyway. What happens when you visit a page? You get redirected or they have completely separate pages that redirect to their site? If so, what is the URL structure?
    --
    I too was hacked once (check my previous threads).
    Remember this: Reinstalling only the hacked site won't always help if you've many sites in your hosting account.
    When I was hacked, hacker had planted backdoors in three different directories of my hosting account. These backdoors could be used by the hacker(or any normal person who knew the URL) anytime to upload any file to any directory of my account.
    So, check each and every directory carefully and open all the files which were modified recently and check for suspicious codes. (use Filezilla to sort files and directories by modified date)
     
    • Thanks Thanks x 1
  9. Michlap

    Michlap Regular Member

    Joined:
    Aug 5, 2014
    Messages:
    409
    Likes Received:
    18

    they have created completed seperate pages that I can only find when i go to site:yourdomain.com in google. The URL structure of these pages is mywebsite.com>miscrosoftdownload.

    So, if i have to delete everything, I can't copy the wp includes folder over to the new install?
     
  10. june007

    june007 BANNED BANNED

    Joined:
    Sep 9, 2015
    Messages:
    359
    Likes Received:
    41
    Should reinstall manually again and choose only trustworthy plugin or your site will be hack the second time.
     
  11. Michlap

    Michlap Regular Member

    Joined:
    Aug 5, 2014
    Messages:
    409
    Likes Received:
    18
    So annoying for images, outbound, inbound links etc
     
  12. davids355

    davids355 Jr. VIP Jr. VIP

    Joined:
    Apr 25, 2011
    Messages:
    10,422
    Likes Received:
    8,122
    If you have to reinstall then export your content from Wordpress admin then save your uploads folder.
    Export any theme settings from admin.
    Also keep your old theme folder just in case you had made any customisations
    take note of your permalink settings as well from in admin, because you want to keep all your urls the same.
     
  13. remboka

    remboka Registered Member

    Joined:
    Jan 8, 2014
    Messages:
    69
    Likes Received:
    12
    If you can access your wp dashboard you can make a backup from Tools -> Export
    Once you reinstall your WP, you can do the opposite, Tools -> Import
    http://i.imgur.com/K0UDm3h.png

    This way you will have all your pages and posts restored. However if you posts and pages contains media (images) you will need to make a backup for them and restore them later from FTP/File manager. Make sure you know in which folder you host those media. If you upload images from the WP create new post usually it will be on Wp-Content -> Uploads folder.

    If you can't access your WP dashboard, you need to back up and restore from the database (phpmyadmin).

    Note: After you export/backup, don't uninstall the previous WP right away. Instead, create a new WP installation on a subdomain for example. Restore your previous backup there, make sure everything works fine. Then you can proceed with the entire uninstall - reinstall process.
    Make sure to make a note on other settings like mentioned by davids355 above.
    Good luck!
     
    Last edited: Apr 22, 2016
  14. tompots

    tompots Elite Member Premium Member

    Joined:
    Dec 11, 2011
    Messages:
    4,371
    Likes Received:
    3,967
    Gender:
    Male
    Occupation:
    Full Time Bot Developer
    Location:
    Automation Alternatives
    Home Page:
    Before you do anything backup your instillation and your database, are you sure you have to do that? you can install WordPress Security Plugin | Wordfence and see if it can identify the problem for you?
    Code:
    https://www.wordfence.com/
    
     
    • Thanks Thanks x 1
  15. artemis42

    artemis42 Regular Member

    Joined:
    Oct 5, 2015
    Messages:
    334
    Likes Received:
    85
    Occupation:
    Self-employed
    Just do a full reinstall but remember to backup the database. Also, your host sounds like a prick. Spend a few more bucks, get a better one. What kind of host doesn't help its own customers/clients? You're paying him for everything, not the other way around. Slap the lil noob. Change it, and be careful of what plugins you download.
     
  16. howard_hughes

    howard_hughes Elite Member

    Joined:
    Jul 23, 2009
    Messages:
    5,058
    Likes Received:
    3,695
    Occupation:
    Just Another Digital Marketer!
    Location:
    "Insta Rank"
    Home Page:
    There are some security / hack proof plugins in wp. Might want to try that.

    make sure to keep a db backup on your pc/pendrive, just in case.
     
  17. SEO FOX

    SEO FOX Jr. VIP Jr. VIP

    Joined:
    Apr 27, 2015
    Messages:
    3,715
    Likes Received:
    754
    Gender:
    Male
    Location:
    Infront Of U!!
    Home Page:
    Export your database with a plugin and upload it again
     
  18. Furious Man

    Furious Man Jr. VIP Jr. VIP

    Joined:
    Aug 4, 2015
    Messages:
    1,929
    Likes Received:
    314
    reinstall manually again and choose only believable plugin buddy