I've been hacked ! Help please!!

Michlap

Regular Member
Joined
Aug 5, 2014
Messages
409
Reaction score
18
There have been pages created on my website that are linking to an illegal download. I'm also ranking for these keywords. In ahrefs it shows spanish pages are linking to my website for the keywords that I'm ranking for ( they have nothing to do with my website)

I cannot find these pages on my website, but I can on Google.

How can I get rid of these pages?


Please help me!!!
 
Your website was most likely hacked due to poor coding/outdated plugins/security breach. Usually links/pages you are talking about are appended to the template source itself. In such situation I would suggest you backing up your database and rebuilding the site with fresh wordpress setup and plugins (since wordpress core and plugins could get infected and since you have no experience it will be hard for you to find malicious code manually). Also you should change your passwords and clean all theme files (unless you still have original not infected theme somewhere).
 
Your website was most likely hacked due to poor coding/outdated plugins/security breach. Usually links/pages you are talking about are appended to the template source itself. In such situation I would suggest you backing up your database and rebuilding the site with fresh wordpress setup and plugins (since wordpress core and plugins could get infected and since you have no experience it will be hard for you to find malicious code manually). Also you should change your passwords and clean all theme files (unless you still have original not infected theme somewhere).

Will this mean I will lose all the SEO I have done if I have to reinstall the wordpress?

Do I also need to contact Google about the links g to my site?
pointin
 
What sort of asshole does this
 
What sort of asshole does this
Assholes who are competing for your keyword might have done that. It's a play to get a google site penalty. You can easily take a backup and re-install wordpress or talk to a wordpress expert.
BTW, with wordpress lot of people keep their posted by: [Username] and wordpress login [Username] same. You're basically handing a key to hack your website..
 
Bots bro, they just target typical wordpress setups and look for outdated plugins/themes with security issues, then they inject malicious code and if your host has poor chmods everything gets infected. You wont lose SEO if you backup your current content and plugins settings (database, upload files - tho you should scan these folders for malicious code). Update your wordpress to current version or find the one you are using, perform a full database backup, backup your media files, setup fresh wordpress install, import the database, configure wp-config, clean and upload your media files and you should be good to go. If you were not doing it before you should do it first on other host or locally and check if everything is working.

Edit: IMPORTANT: If you are using popular cms systems (like wordpress) you HAVE TO keep things updated you should also read more about 'hardening of wordpress security' or just use good security plugins.

Edit2: You don't have to inform google, just remove the malicious code.
 
Last edited:
Assholes who are competing for your keyword might have done that. It's a play to get a google site penalty. You can easily take a backup and re-install wordpress or talk to a wordpress expert.
BTW, with wordpress lot of people keep their posted by: [Username] and wordpress login [Username] same. You're basically handing a key to hack your website..

I don't have back ups :(

What is the best plugin to use for back ups?
 
Nope, just rebuild everything quickly and your seeps will be fine.

You can disavow the links pretty easily. Just take a look at it on Webmaster Tools.

Do I need to be on webmaster tools to disavow links?
 
There have been pages created on my website that are linking to an illegal download. I'm also ranking for these keywords. In ahrefs it shows spanish pages are linking to my website for the keywords that I'm ranking for ( they have nothing to do with my website)

I cannot find these pages on my website, but I can on Google.

How can I get rid of these pages?


Please help me!!!

Poor coding, like he said above.

It is the result of your website being hacked.
Contact our moderators they might be able to check out your site, and see what they can possible do about it.
Idk though.

Regards,
Gorka.
 
So how do I disavow links exactly?

Should I get started on that night or wait until I sort my website out?

Thanks so much guys, I really appreciate the help.
 
You can disavow spam links pointing to your site in webmaster tools, just google "webmaster tools disavow" for tutorials. You can disavow links before cleaning the website since they are not on your host anywany.
 
Try contacting your hosting and asking them to help, I would think they would do that since they like your money.
 
Try contacting your hosting and asking them to help, I would think they would do that since they like your money.

I've done this, they said they are currently doing a scan which may take a few hours.

I messed around with the coding a few weeks back, so I'm guessing its that.
 
I would just wait and see the results from your hosting, I'm not saying to rely on them 100% but some hosting business's are very good at what they do. I have a few issues with hacked websites before and one hosting site did some checks and then ended up fixing the problem. If you start tinkering around and you don't know what you're doing you may make it worse, be patient and just wait it out would be my advice.
 
Try to contact your hosting provider and tell them to restore the backup.
Later on, remove the suspicious urls from Google Webmasters Tool.

Try to keep updated plugins and themes :)
Avoid Nulled stuff and make sure the permission for your files must be read only :)
I guess your public_html directory got either 755 or 777 Permissions.

You can learn about permissions from Google.

Thanks,
SoccerLover!
 
Hi,

Approx 60-70% websites are hacked when they update/install plugins. You have to scan your entire website. I hope you will find some codes on pages (effected by malware).

These activities are not done competitors.

You should remember:

1. Upload/Edit your website from the computer protected by anti-virus.
2. Never update/install plugins before manually review codes
3. Buy premium themes only for your website if you are using CMS.
4. Keep vigil eye on your website performance and search engine's behavior
5. Monitor Google webmaster tool twice a week at-least

Hope these tips will help you better.

Thanks
 
Yup, wait for your hosting provider. But even if they manage to restore backup you should check your files for malicious code, update everything and change your passwords because cheap hosting providers usually keep short time backups which may be already infected version of your site.
 
Back
Top