My websites keep on getting hacked! :(

chances are you are spreading the a virus that edits any html files it can!

change the password on another computer and see if it happenes again

its cause of your hosting! i had tmdhosting and i used to get hacked every week cause tmdhosting has 0 security

nipunn12 said:

Also I'm using Just Host to host my sites. I think these kind of hosting sites don't care much about safety of websites hosted through shared hosting

Click to expand...

I'm on JustHost too. Most of my sites got hacked but nothing as bad as yours. I downloaded my sites and scanned them with malware bytes which flagged a bunch of files which I deleted. Seemed to fix it. Now I backup my sites regularly. What a pain.

Use PHP antivirus software that will show what files were edited, deleted, added etc.
The one I found that works well is "ZEOS ANTIVIRUS" but its in Russian.

Move your config files away from the standard installation folder and redirect to the parent's folder:
a) It wouldn't be a typical installation 90% scripts give up
b) you can change mode to rx- only (read only) this prevent for changing
ps php as a server-site scripts has had access to whole your account space (so no problem if links are correctly changed)

I had situation last year that competitors hack my client www account (on joomla) I changed directory. This prevent hacking - they just try

It got traced back to Sharjah University in UAE. I also live in UAE so maybe they just got all domains registered in that country and hacked it for fun.
Also i exported all the posts and comments from WordPress then got JustHost to wipe my account. After that I added all my domains and subdomains back and installed the latest wordpress on them. Then i imported the posts, comments , categories and installed my sidebar and security widgets.

* Reported to Etisalat * ( UAE internet and phone company )

Sounds to me like you have a virus. Scan your computer with all tools you can find... I had a similar situation once, only got hacked once though. Was a bit embarrassing when I started to blame my host....

I have also been hacked twice this month by different hacking teams. My site is wordpress based. Any help will be thankfully

I have the same situation. everytime I type my website on google it will show up results but when i click on the links it will say that the site is potentially dangerous. when I check the address bar the site is a .ru so i can assume its from russia. I scanned my pc no virus and the like. So should i contact my host service.? I am using brainhost by the way.

I contacted my webhost and they were able to note that there is a 301 redirect going on in my site. I did not do any 301 redirect as I am not aware of it. So they created a ticket. Hopefully once this issue is resolved I should see impression again for this website. This is perhaps is causing for my website to drop in serps all of its keywords.. I was thinking my site was sandboxed but now I don't as I see that this is the real issue.

Also ran a couple of test usng the tools above and have sown a positive 301 redirect to a russian site. Why the heck are they going to do that.

ianvictorgabon said:

I contacted my webhost and they were able to note that there is a 301 redirect going on in my site. I did not do any 301 redirect as I am not aware of it. So they created a ticket. Hopefully once this issue is resolved I should see impression again for this website. This is perhaps is causing for my website to drop in serps all of its keywords.. I was thinking my site was sandboxed but now I don't as I see that this is the real issue.

Also ran a couple of test usng the tools above and have sown a positive 301 redirect to a russian site. Why the heck are they going to do that.

Click to expand...

Download FileZilla and log in to your FTP ( Check youtube/google for tutorial ) then in FileZilla go to public_html and go to your site folder ( can be any name * a name you set * ) example BlackHatWorld for blackhatworld.com then click on sort by date modified and right click and press edit on the ones edited on the day and before the day of being hacked.

Open with Notepad and in the options - Find - Type russian site name and press find and then remove that text. DO NOT REMOVE INVISIBLE TEXT AROUND IT AS IT IS THE ORIGINAL SCRIPT. Press save

Do this for all your website folders. Also do this for the root of your ftp and now try to access site through facebook / twitter.

If this does not work then make a full backup of your site and download it. Then go to your wordpress accounts and click on export ( Pics and Vids uploaded to server will be lost but if you linked to another site it will stay )
Now send an email to host to wipe your account and after they do that add your sites and install wordpress again. Than upgrade Wordpress, install the security apps posted by bhw members above , then go to tools - import and then import the posts. You can also install your theme and other plugins manually later.

-------------------------------------------------------

Does not work? Upload your backup file ( ask them to do it ) and then appoint a security service to fix it and keep track on it ( Yearly/monthly subscription )

lizmoz said:

Sounds to me like you have a virus. Scan your computer with all tools you can find... I had a similar situation once, only got hacked once though. Was a bit embarrassing when I started to blame my host....

Click to expand...

Scanned with ESET 5 50 times

wp super weep plugin and Backup buddy are paid

How is Backup Buddy, I might buy it if its good enough

The first thing I would do is change host , change db passwords, and check the write permissions on files.


Then I would also check my computer for any viruses , but just format it to be sure. When I was first starting I got your problem and I found out that they also hacked my PC, and the website .


You don't need any backup buddy, just download your database, and upload it to the new host. Then edit it in phpmyadmin if there are any problems left. But I would look for another username created in there. because sometimes they create another user in wordpress.

I am security expert. Most of the comments made me laugh hard... I can help you. Audit, patch, whatever you want... PM me if you are interested and we can think about your problem.

Regardz.

very bad karma or voodoo jinxx

I added all information on half of my sites and they get 1000% more unique traffic than they used to get now! ( Also my sites are not selling anything and im giving useful unique information so people are re visiting my sites !)

What you need is a server hardening. I did for my own VPS. Check on Fiverr - there are people willing to help.

I got hacked again ( One site ) ! After Full Clean Install with the plugins.

MY other sites are fine but now it links to http://www.joblist-id.com/2012/02/promo-member-alfamart-minimarket-lokal.html