1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Website has been hacked

Discussion in 'Blogging' started by everythingred, Jan 5, 2012.

  1. everythingred

    everythingred Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 21, 2010
    Messages:
    1,988
    Likes Received:
    1,300
    Some douchebags have hacked my site. I removed wordpress and reinstalled and still get their stupid screen on my website about them being Albanian and saying Fuck You told some other countries. I don't know what kind of virus this is but if anyone can help me that'd be great.
     
  2. MadMX

    MadMX Regular Member

    Joined:
    Oct 2, 2011
    Messages:
    254
    Likes Received:
    183
    Occupation:
    idling
    Location:
    Berlin
    Check for shells on your server. Remove them, delete all files, reinstall wordpress, change all your passwords.

    Cheers
     
  3. ddvv84

    ddvv84 Regular Member

    Joined:
    Mar 2, 2011
    Messages:
    210
    Likes Received:
    178
    Occupation:
    Junior Network Admin P/T, Live Forex Trader
    Location:
    BROOKLYN, New York
    He might have placed a script into your root directory to replace all homepages...... Uninstall wordpress and everything else you had on that hosting. Then check the folders and see if anything is there that shouldn't be there. Most likely its just a index.php that he replaced...
     
  4. everythingred

    everythingred Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 21, 2010
    Messages:
    1,988
    Likes Received:
    1,300
    alright thanks i'll contact my hosting company
     
  5. mikie46

    mikie46 Jr. VIP Jr. VIP

    Joined:
    Aug 6, 2008
    Messages:
    1,454
    Likes Received:
    1,102
    Were you running WP Supercache? Tons of people are being hacked though this plugin for WP. Make sure you remove it completely and install the latest version.
     
  6. contentcouch

    contentcouch Power Member

    Joined:
    Oct 24, 2011
    Messages:
    547
    Likes Received:
    82
    Maybe hosting provider will be the best deal to solve this issue, since it's hacking. If it was an error, then could have been resolved with an uninstall and reinstall. But, even after you have the same problem, get the server cleaned up from the hosting provider.
     
  7. roamer

    roamer Power Member

    Joined:
    Dec 2, 2008
    Messages:
    500
    Likes Received:
    480
    Occupation:
    Gfx designer, vfx and mgfx
    Location:
    plɹoʍ ǝɥʇ punoɹɐ ƃuıɯɐoɹ
    Last time I got a website defaced, it was the web hosting company's fault (server not properly hardened, thus exploited). Lots of websites on that server got defaced. Since it was some el cheapo web hosting account (IP diversity for seo purposes, usual stuff), I just figured out the hacker was somehow overwriting the default index pages (index.html, index.php) so I used htaccess to set another non-standard default page name (main.php was my choice), and modified the CMS to use default.php instead of index.php where needed. Ta-dah, problem solved. I still had my decoy index.php changed to the flavor of the week script kiddie's h4x0r handle, but nobody saw that anyways.
     
    Last edited: Jan 6, 2012
  8. __dark__

    __dark__ Registered Member

    Joined:
    Feb 15, 2010
    Messages:
    62
    Likes Received:
    24
    check if you have any rewrite rules in your .htacces, also it would be helpful if you could share your link here so we can check it out
     
  9. hamish11

    hamish11 Regular Member

    Joined:
    Oct 8, 2011
    Messages:
    285
    Likes Received:
    137
    Occupation:
    IT Project Manager
    Location:
    SoCal
    When this happened to me, it wasn't a site hack at all, someone managed to redirect my hosting company's name servers to their own. Hosting company resolved it in a few hours but I did not have to take any action on my sites.
     
  10. Jilted

    Jilted BANNED BANNED

    Joined:
    Jan 5, 2012
    Messages:
    155
    Likes Received:
    65
    When you re-install wordpress make sure all the plugins you install are clean. I don't know if you had any buthurted enemies but most of the time infected plugins are to blame for this kind of stuff.
     
  11. poweronics

    poweronics Jr. VIP Jr. VIP Premium Member

    Joined:
    May 1, 2011
    Messages:
    3,116
    Likes Received:
    353
    Occupation:
    Freelancer
    Home Page:
    Your hosting company must have proper backup for you.
     
    • Thanks Thanks x 1
  12. markhenry121

    markhenry121 Elite Member

    Joined:
    Oct 14, 2011
    Messages:
    2,148
    Likes Received:
    240
    Yes contact with your hosting company and they will solve your problems.
     
  13. cronk

    cronk Newbie

    Joined:
    Nov 26, 2011
    Messages:
    17
    Likes Received:
    1
    i'm suggest wp sweep (you can get from download section)... as precaution for the future