I don’t know how, but my sites seem to have become infected again despite running the script and doing various other things to secure my site.
The irony is I didn’t even bother phoning my support guys this time around. I’d get that dumb look and “we don’ support scripting” answer I always seem to get. Yet,I somehow don’t think GD will say it is a security hole in their system.
I would try to send your problem to:
https://www.godaddy.com/securityissue
I did it a couple hours ago… I’m waiting a response…
I am running my site http://invictatrader.com on GoDaddy also. Even though I am on WP version 2.9.2 this is the second time in less than 2 weeks this happened. Will try running the script.
Fired off another email to my hosting provider who is a front for GD.
Scripted worked for me again. phew
In my case, I have up to date wordpress (2.9.2), plugins, file permissions are ok, strong passwords… and i was hacked twice (my blogs and my bbpress forum)…
I have a Mac, so, i don’t think it was a problem of virus in my computer…
I have another hosting account in bluehost and i haven’t had any problem…
I think the problem is Godaddy…
I ran the script and it said it was done but my login page is still funny. Will see if it fixed all the files.
After the last round. I changed all my passwords to twice the length. Thankfully never used the default admin username for anything.
Changed the sql table prefix and installed the wp security scanner plugin and ran that too.
I’m certainly no WP or SQL whizz.
I’m told I’ll have a response within the hour….mmm. It’s getting late where I am.
Surely there must be a best practice guide for shared hosting? I wonder if GD follow it or how do they host compared to others i.e. Bluehost.
I find it interesting that at NetWork Solutions when they got hacked massively, they were very transparent about it – admitting it was not wordpress but their own problem…yet godaddy is trying to hide and down play this hack to their servers
I’m just so grateful for the script. I’d suspect GD is running scared. They don’t either know what is causing it or who. Or more likely how to fix it.
They’ll be worried people will leave them as a hosting provider. The irony is most people wont.
Yes, it is happening again only at GoDaddy.
So far we counted more than 500 sites already with this new malware.
http://blog.sucuri.net/2010/05/lots-of-sites-reinfected-now-using.html
Let’s see if they will blame the users again…