1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

I've been hacked need help

Discussion in 'Black Hat SEO Tools' started by markantos, May 6, 2016.

  1. markantos

    markantos Junior Member

    Joined:
    Sep 4, 2015
    Messages:
    135
    Likes Received:
    25
    My site has been hacked for sure.

    In google search it shows some things like top quality essay, essay for education etc pages that don't exist. But they are all over the searches.

    Please help me out here.

    How do I fix this? I'm using WP.
     
  2. Adrian112

    Adrian112 Supreme Member Premium Member

    Joined:
    Jan 16, 2014
    Messages:
    1,373
    Likes Received:
    2,630
    Check your theme files, use theme authencity checker, if you know something about code check it, check for pages and posts with these keywords
     
    • Thanks Thanks x 1
  3. markantos

    markantos Junior Member

    Joined:
    Sep 4, 2015
    Messages:
    135
    Likes Received:
    25
    Thanks Adrian for that. But checking themes but I'm still worried about it being in the database. What's the process of having the same database and starting fresh when you think the database has been corrupted? Is there a database cleaner you know about?
     
  4. Conor

    Conor Jr. VIP Jr. VIP

    Joined:
    Nov 7, 2012
    Messages:
    3,571
    Likes Received:
    5,937
    Gender:
    Male
    Location:
    South Africa
    Home Page:
    Focus on the database later.

    Remove/Replace your wp-admin and wp-includes files with clean copies from wordpress.org
    Do the same with the files in the root directory, minus your wp-config.php file

    Install this plugin, and let it scan your whole site: https://wordpress.org/plugins/gotmls/

    The plugin will usually be able to clean your site of most malware, provided you aren't using potentially risky nulled themes.

    If you're still worried about it being hacked, do a backup of your content (tools > export) and just install a new WP site from scratch. I wouldn't go that far though.
     
    • Thanks Thanks x 2
  5. markantos

    markantos Junior Member

    Joined:
    Sep 4, 2015
    Messages:
    135
    Likes Received:
    25
    Conor I'm seeing its giving me issues in my plugins nearly all of them. Does it clean or should I uninstall these plugins. I have 5 plugins with issues.
     
  6. Conor

    Conor Jr. VIP Jr. VIP

    Joined:
    Nov 7, 2012
    Messages:
    3,571
    Likes Received:
    5,937
    Gender:
    Male
    Location:
    South Africa
    Home Page:
    It should give you an option to clean the infected files.
     
  7. markantos

    markantos Junior Member

    Joined:
    Sep 4, 2015
    Messages:
    135
    Likes Received:
    25
    thanks then let me wait until its done. Then I'll ask again.

    By the way since the urls are already indexed, do i have to do anything in google console?
     
  8. Conor

    Conor Jr. VIP Jr. VIP

    Joined:
    Nov 7, 2012
    Messages:
    3,571
    Likes Received:
    5,937
    Gender:
    Male
    Location:
    South Africa
    Home Page:
    If Google has detected the malware, then yes. Once it's done, just tell Google that your site is now clean.

    If it is, it'll remove the "This site may be harmful" warning.
     
    • Thanks Thanks x 1
  9. craigc0302

    craigc0302 BANNED BANNED

    Joined:
    Apr 19, 2015
    Messages:
    72
    Likes Received:
    11
    Securi.net is a good offering for anyone who has been hacked, they clean it up for you. Use them, or restore a copy of your website to before the hack took place and make it more secure
     
  10. CenTex Hosting

    CenTex Hosting Jr. VIP Jr. VIP

    Joined:
    Nov 8, 2009
    Messages:
    2,001
    Likes Received:
    763
    Gender:
    Male
    Occupation:
    Founder/CEO
    Location:
    Austin, TX
    Home Page:
    ask your web host as well. A lot of times they can run a scan from the server side find the files and disable them for you.
     
    • Thanks Thanks x 1
  11. DoctorGeek00

    DoctorGeek00 Newbie

    Joined:
    Dec 13, 2013
    Messages:
    33
    Likes Received:
    2
    Do you have any backup? You can also contact your hosting provider. Basically reputable hosting provider keep your backup. You can try to contact them. To avoid this problems again, I would recommend you to periodically backup your site. Here are some tips that you can follow to secure your wordpress site. I also read this documentation:

    - http://windowswebhostingreview.com/oh-dam-my-wordpress-site-has-been-hacked/
    - http://windowswebhostingreview.com/how-to-identify-that-your-wordpress-site-is-hacked/

    You can read the above documentation, it is very clearly.
     
  12. markantos

    markantos Junior Member

    Joined:
    Sep 4, 2015
    Messages:
    135
    Likes Received:
    25
    Thanks to all of your comments and suggestions.

    The problem was actually not on my server but on a clients and for the life of me dealing with an already hacked site was something I had not encountered before.

    This is what happened.

    I used the gotml plugin and all of a sudden the client got a resources expired suspension. It was hostgator, you know how they love forcing you to buy dedicated servers. So we contacted them and pleaded to allow the site to be up for just 2 hours as we sorted the problem. lol

    Once they did that, we moved it to our server

    Then ran gotml again....Silly mistakes like downloading "free" themes cost this client 3 weeks of business.

    Lesson learned

    1. Stop using "free" premium plugins and themes
    2. Please avoid hostgator and any ecw hosting
    3. use gotml and contribute to the fellow
    4. Use secure hosts.....Funny but most are actually called blackhat by others...

    Thanks again guys.
     
  13. W9go

    W9go Jr. VIP Jr. VIP Premium Member

    Joined:
    May 16, 2011
    Messages:
    4,776
    Likes Received:
    973
    Gender:
    Male
    Occupation:
    chasing girls
    Location:
    chasing girls
    one and two makes good sense.
    great to read this here to create awareness.....i check my WP pages and removed all plugins which i am not 100% sure about...
     
  14. Sristy

    Sristy Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 17, 2010
    Messages:
    1,815
    Likes Received:
    481
    Gender:
    Female
    Location:
    In My Blog Network
    Home Page:
    First and foremost, take the help of your host. Most webhosts are nice and they would get your files cleaned.

    If they don't agree to do this, then take a backup of your database and do a reinstallation of wordpress, that is the best solution if you do not want to spend money on getting this repaired. Else there are lots of options available online which does, some are even available on fiverr worth taking a look at.