From what I can tell I have been hacked

  • MrDM

    (@mrdm)


    10 years, 8 months ago

    I have set my own website as my homepage, one day I opened up my browser and my AV gives me a warning that it his been Blackhat SEO. Following some helpful instructions I checked to see if there is any hidden texts which I ended up finding that every time I did the viagra site: my website and it comes up. Now I changed my theme from Twenty Eleven to Twenty Twelve and I no longer get the warning from my AV but it still comes up in the search. All I am asking for is some help to see if I need to go further then just changing the theme. I have changed my password but I don’t know the extent of the damage.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Christiaan Conover

    (@cconover)

    10 years, 8 months ago

    What’s the URL for your site?

    If you’re unsure of damage to your site, your best bet is to make a backup of your site files & database, delete all the files except the wp-content folder and upload a fresh copy of WordPress (minus wp-content). In your case it may be a good idea to delete all plugins and themes and upload fresh copies of those as well.

    Thread Starter MrDM

    (@mrdm)

    10 years, 8 months ago

    Oh I’m sorry, I should have posted. http://www.talesofmrdm.com

    Christiaan Conover

    (@cconover)

    10 years, 8 months ago

    A cursory glance through your page source doesn’t reveal anything malicious, so it would seem you’re probably all set after changing the theme.

    Delete the Twenty Eleven theme folder from your server, and unless you’re planning to switch back to that theme there’s no need to upload a fresh copy. Make sure you change passwords on all user accounts, as well as any FTP accounts that can access your site. Also, verify that file permissions are correct. They should be 755 for folders and 644 for files.

    Thread Starter MrDM

    (@mrdm)

    10 years, 8 months ago

    Thank you.

    Christiaan Conover

    (@cconover)

    10 years, 8 months ago

    No problem. If you think you’re all set, please mark this thread as resolved.

    Jarret

    (@jarretc)

    10 years, 8 months ago

    You’ll also want to verify your site in Google Webmaster Tools ( https://www.google.com/webmasters/tools/home?hl=en ) and then once you have done that, request a reconsideration with them ( https://www.google.com/webmasters/tools/reconsideration?pli=1 )

    The reconsideration asks them to take another look at the site and update the search results to remove any spam as well as remove the compromised warning they are showing for some of the URLs. As far as to how quick you’ll see these updates, typically takes around 5 days before you start to see things update but can take longer.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘From what I can tell I have been hacked’ is closed to new replies.