I've been hacked need help
- Thread starter markantos
- Start date
markantos
Junior Member
- Sep 4, 2015
- 163
- 43
Thanks Adrian for that. But checking themes but I'm still worried about it being in the database. What's the process of having the same database and starting fresh when you think the database has been corrupted? Is there a database cleaner you know about?
Conor
Elite Member
- Nov 7, 2012
- 3,621
- 6,217
Focus on the database later.
Remove/Replace your wp-admin and wp-includes files with clean copies from wordpress.org
Do the same with the files in the root directory, minus your wp-config.php file
Install this plugin, and let it scan your whole site: https://wordpress.org/plugins/gotmls/
The plugin will usually be able to clean your site of most malware, provided you aren't using potentially risky nulled themes.
If you're still worried about it being hacked, do a backup of your content (tools > export) and just install a new WP site from scratch. I wouldn't go that far though.
Conor
Elite Member
- Nov 7, 2012
- 3,621
- 6,217
It should give you an option to clean the infected files.
markantos
Junior Member
- Sep 4, 2015
- 163
- 43
thanks then let me wait until its done. Then I'll ask again.
By the way since the urls are already indexed, do i have to do anything in google console?
craigc0302
BANNED
- Apr 19, 2015
- 72
- 11
Securi.net is a good offering for anyone who has been hacked, they clean it up for you. Use them, or restore a copy of your website to before the hack took place and make it more secure
Couch Monkey Media
Elite Member
- Nov 8, 2009
- 2,787
- 1,146
ask your web host as well. A lot of times they can run a scan from the server side find the files and disable them for you.
DoctorGeek00
Newbie
- Dec 13, 2013
- 37
- 4
Do you have any backup? You can also contact your hosting provider. Basically reputable hosting provider keep your backup. You can try to contact them. To avoid this problems again, I would recommend you to periodically backup your site. Here are some tips that you can follow to secure your wordpress site. I also read this documentation:
- http://windowswebhostingreview.com/oh-dam-my-wordpress-site-has-been-hacked/
- http://windowswebhostingreview.com/how-to-identify-that-your-wordpress-site-is-hacked/
You can read the above documentation, it is very clearly.
markantos
Junior Member
- Sep 4, 2015
- 163
- 43
Thanks to all of your comments and suggestions.
The problem was actually not on my server but on a clients and for the life of me dealing with an already hacked site was something I had not encountered before.
This is what happened.
I used the gotml plugin and all of a sudden the client got a resources expired suspension. It was hostgator, you know how they love forcing you to buy dedicated servers. So we contacted them and pleaded to allow the site to be up for just 2 hours as we sorted the problem. lol
Once they did that, we moved it to our server
Then ran gotml again....Silly mistakes like downloading "free" themes cost this client 3 weeks of business.
Lesson learned
1. Stop using "free" premium plugins and themes
2. Please avoid hostgator and any ecw hosting
3. use gotml and contribute to the fellow
4. Use secure hosts.....Funny but most are actually called blackhat by others...
Thanks again guys.
The problem was actually not on my server but on a clients and for the life of me dealing with an already hacked site was something I had not encountered before.
This is what happened.
I used the gotml plugin and all of a sudden the client got a resources expired suspension. It was hostgator, you know how they love forcing you to buy dedicated servers. So we contacted them and pleaded to allow the site to be up for just 2 hours as we sorted the problem. lol
Once they did that, we moved it to our server
Then ran gotml again....Silly mistakes like downloading "free" themes cost this client 3 weeks of business.
Lesson learned
1. Stop using "free" premium plugins and themes
2. Please avoid hostgator and any ecw hosting
3. use gotml and contribute to the fellow
4. Use secure hosts.....Funny but most are actually called blackhat by others...
Thanks again guys.
First and foremost, take the help of your host. Most webhosts are nice and they would get your files cleaned.
If they don't agree to do this, then take a backup of your database and do a reinstallation of wordpress, that is the best solution if you do not want to spend money on getting this repaired. Else there are lots of options available online which does, some are even available on fiverr worth taking a look at.
If they don't agree to do this, then take a backup of your database and do a reinstallation of wordpress, that is the best solution if you do not want to spend money on getting this repaired. Else there are lots of options available online which does, some are even available on fiverr worth taking a look at.