WordPress.org

Ready to get started?Download WordPress

Forums

A couple of questions. (8 posts)

  1. Rukey
    Member
    Posted 2 years ago #

    Not quite sure if this is the correct board to post this.

    I was using 3.2.1 before this incident happened. I had a few suspicious looking emails directed through the "Contact form" on the website saying that some of my content had been reported by their google alert system, with the following URL: "www.bodybuildingdatabase.com/wp-includes/css/cmmquarterly" but I know for a fact that I don't have anything in the file directory with that in the title (I checked to make sure). I had an email the next day with something similar.

    If I search the website URL via google "bodybuildingdatabase", google does suggest that the website has been comprimised. I recently changed all passwords on all user accounts (On wordpress and the server), updated to 3.3.1 (Which I should have done before). Then re-changed the passwords for the sake of it.

    I also signed up for the webmaster tools provided by google as to suggest whether there is anything wrong with the site. No change than normal as of yet.

    I'm not really sure how to proceed in getting to the bottom of this...

  2. esmi
    Forum Moderator
    Posted 2 years ago #

  3. Samuel B
    moderator
    Posted 2 years ago #

    if you scan your site here you will see the problem
    http://sitecheck.sucuri.net/scanner/

  4. Rukey
    Member
    Posted 2 years ago #

    Thanks for the advice guys, I see the problem and have tried to find this code in the post and on the URL it suggests, there is nothing inside the HTML in that post.

    I always checked the theme index.php files, against an old backup (4 month old backup) and they look the same. Where would you suggest looking to find this specific code?

  5. Rukey
    Member
    Posted 2 years ago #

    Call me stupid, but if I search in google "Bodybuildingdatabase family guy" I got a whole host of strange URLs referencing my site.

    http://www.google.co.uk/search?source=ig&hl=en&rlz=&q=bodybuildingdatabase+family+guy&oq=bodybuildingdatabase+family+guy&aq=f&aqi=&aql=&gs_sm=e&gs_upl=473318l481362l0l481516l31l25l0l12l2l0l167l1399l7.6l13l0 - Google URL.

    I'm not sure how far this issue goes back. Where do these google searched URL's reference some file path that doesn't exist in my directory?

  6. esmi
    Forum Moderator
    Posted 2 years ago #

    Your site has been hacked.

  7. Rukey
    Member
    Posted 2 years ago #

    I know, you said that alittle earlier. Did you understand what I am asking in that last question? If you can't answer that's fair enough, I Just wanted some guidance on the subject.

  8. esmi
    Forum Moderator
    Posted 2 years ago #

    I'm not sure you understand the situation. Your site will display these strange links because a hacker has inserted them into the site. Until you clean out the hack, they'll stay there.

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.