Wordpress Template Hacked????

I

idmercu

Newbie
Joined
May 15, 2012
Messages
46
Reaction score
3
My wordpress template that I downloaded from mediafire via BHW may have a hack or something attached to it. I cannot remove it. dogsforsaleincolumbusohio/dot/kom
Its in the top left corner. Says something like 'the documents have moved here:' with a link to a crazy domain ww10opengraph, some BS. Anyways any advice on how to remove it. I looked in the template editor and style.css. Please help me get rid of it. Will give thanks and rep for any help and advice.:)

ty.
 
Advertise on BHW
you had been hacked.
check your index.php on wordpress or any
better remove all public_html
 
Probably check the functions.php file. He may have a hook in there.

Also install Windws Grep on your computer and then search the folder of the theme with it for the external url. It will show up in which file the url is located and you can remove that.
 
It is in the main php file for your template, look for this line should be a 5 min fix at most. Doesnt look like you were hacked. looks like someone added it to the theme files

<p>The document has moved <a href="http: //ww10 dot opengraphs dot org">here</a></p>
its in the header just above the head tag
 
Last edited:
Thanks for the responses. Still stumped. I tried everything you guys above mentioned. Gave thx and rep still. Anyone else that has an Idea plz share. I also would hate for anyone else to have to go thru this. This thread where I downloaded this is still up for others to get duped.
 
For further checking scan your site here
Code: 
http://sucuri.net/
 
Because more is better
Here you have like 5 virus scanner
Some very good in javasript

Wepawet
JSunpack
Quttera
Zulu
Unmask Parasites
Comodo

I advice to test all lol for better reliability
 
I just ran a search on all the files in the theme and cannot find the spam hack link. The system just keeps saying no records found. But hpw could that be when it is obviously right there on the front page? Any ideas??
 
idmercu said:
I just ran a search on all the files in the theme and cannot find the spam hack link. The system just keeps saying no records found. But hpw could that be when it is obviously right there on the front page? Any ideas??
Click to expand...

In the database
 
One cause: TimThumb
Mine was hacked because the template creator didn't checked for timthumb loophole. Bad luck gone too bad -- had actually purchased the WP template!

This plugin may help you before it's too late -- next time.
WP Plugin:
timthumb-vulnerability-scanner
 
Last edited:
goyat said:
Guys is anyone there to help me out :( ?
Click to expand...
No one really can unless you let some expert check it out. But there must be help topics in plenty on G Search, and one of the best things to do initially is to ask your hosting support team to look into your site.

Not that they will be able to find much, most probably they will ask you to restore an earlier backup, do some changes to the htaccess, check the folder/file permissions, remove some files, even clean up your entire website and restore it afresh, and ofc, change password/s.

I did everything on my own when my web host gave me a hint of being under attack due to timthumb presence... I had a clean backup. Do you also have a backup, btw?
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top