Website Hacked - Can you Help?

So my Better WP Security Plugin has been going off lately. Someone has definitely trying to access my wordpress admin area. Then today I got this - http://www.screencast.com/t/WoALpvL8lA

It looks like I got files uploaded to my host without permission. I'd really hate to delete my whole host and build another website.

Can you help?

Thanks!

There has been a lot of WP hacking recently. I think its due to a loophole in the new update. Did you update your WP version, or was it an automatic update?

Nguyend,

Your best bet is to contact your hosting provider and let them know what is happening. Many reputable hosting providers have failsafes in place to help guard against this type of intrusion and should be able to help you fix things without destroying your site. They may also have a backup that you can restore from.

Maybe you can find some help here,

http://www.webmonkey.com/2012/04/what-to-do-when-your-website-is-hacked/

Hope you can get this fixed,

Shawn

Sadly, most of the websites I've fixed were hacked due to outdated WordPress or plugins or outdated themes installed.

Hackers are then taking advantage of the situation to inject their hacker back door scripts.

Suffice it to say, if you aren't checking your blog at least monthly and/or not keeping your blog updated weekly / monthly it's likely you'll be hacked.

Your best course of action is first contact your host and get them to recover your website from backup.

Once you have a clean copy in place then run (don't walk) in making sure all your stuff is updated, all user/passwords changed, etc.

nguyend408 said:

So my Better WP Security Plugin has been going off lately. Someone has definitely trying to access my wordpress admin area. Then today I got this -

It looks like I got files uploaded to my host without permission. I'd really hate to delete my whole host and build another website.

Can you help?

Thanks!

Click to expand...

Is your admin folder in the stereotypical location for a Wordpress install?

Is your password at least 15 characters long and alpha/numeric/symbol?

Have you turned off Anonymous FTP access in your CPanel?

Have you removed user registration?

Thanks for all the help guys!