WordPress.org

1. geester1
   Member
   Posted 1 year ago #

   my blog has been hacked, how do I overcome this and return it to its previous state.

   url is www . lcdtvenclosure dot com / blog

   Please help!

   Thanks

2. Rev. Voodoo
   Volunteer Moderator
   Posted 1 year ago #

   Some hosts (like godaddy) will allow you to just roll your files back to a different date. Or maybe you have a backup to roll back to. Otherwise:

   http://codex.wordpress.org/FAQ_My_site_was_hacked
   http://ocaoimh.ie/did-your-wordpress-site-get-hacked/
   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
   http://www.snipe.net/2010/01/when-wordpress-gets-hacked/

   My Experiences with being hacked:
   http://www.rvoodoo.com/2010/02/the-dreaded-base64-wordpress-hack-and-other-hacks-too/

   And when you're done:
   http://codex.wordpress.org/Hardening_WordPress

3. geester1
   Member
   Posted 1 year ago #

   Thanks for that, I have contacted my host and awaiting their response. I have a clean back up from a few months ago, but if i dont find that, what else can i do?

   I am soo ANGRY....

4. geester1
   Member
   Posted 1 year ago #

   Damb, I cant find the back ups - URGG!

5. geester1
   Member
   Posted 1 year ago #

   looking at the root of my blog I seem to see alot of core files, they look like core.11258, core.12127, core.12777 and the list goes on - I do not know what they are...these are after wp-includes folder when ftping.

   Could these be related?

6. Rev. Voodoo
   Volunteer Moderator
   Posted 1 year ago #

   not sure. They aren't part of WP, not sure if they are something from your host or something? What do they look like on inspection? Like, the code?

7. wpsecuritylock
   Member
   Posted 1 year ago #

   geester1, luckily you're site isn't blacklisted by search engines yet. You need to get it fixed as soon as possible.

   If you don't have a backup, there are ways to fix it, but first you need to know what's been hacked (files, database, etc).

   Feel free to contact me on Skype and I'll see if I can help.

8. UseShots
   Member
   Posted 1 year ago #

   @geester1: What exactly was hacked?

   And what is in those "core" files? There shouldn't be any in "wp-includes". They can be backdoor scripts or "core" dumps of some binary (again, there shouldn't be any).

   I'd like to take a look at those files. You might want to contact me at http://www.unmaskparasites.com/contact/

   Thanks.

Topic Closed

This topic has been closed to new replies.