Help – I Seem To Have Been Hacked!

dalewood
(@dalewood)

11 years, 2 months ago

[Title de-capitalized, please do not shout as us]

Hi
I was working with my site this afternoon, 29th and everything was working fine but when I tried to login this morning at 00:44 30th it just went to Google!

It accepted my login via Roboform but as soon as the login screen appeared the URL changed to http://www.slowtoys.fi and then immediately to Google.

When I opened up the main site http://www.itsjustlife.co.uk it opened up without any header, I was able to scroll down to the posts but when I tried to open up a post it immediately switched to Google.

I will run a full virus scan overnight but I suppose if it has only effected my site whatever is causing it is probably on my web space!

Any ideas, it does not seem to have effected anything else, the only way I can get to my backend is via Cutie ftp.

Any help is appreciated, so annoying, has this happened to anyone else?

Phil

Viewing 3 replies - 1 through 3 (of 3 total)

Mark Ratledge
(@songdogtech)

11 years, 2 months ago

See http://sitecheck.sucuri.net/results/itsjustlife.co.uk

Work your way through these resources and follow all instructions to completely clean your site or you may be hacked again. See FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex.

Change all passwords. Scan your own PC. Use http://sitecheck.sucuri.net/ before and after.

Tell your web host you got hacked; and consider changing to a more secure host: Recommended WordPress Web Hosting

If you can’t do the work yourself, consider looking for a reputable person to fix it correctly on jobs.wordpress.net or freelancing sites such as Elance. (It’s not a good idea to respond to unsolicited emails from forum users offering to work for you.)

Pioneer Web Design
(@swansonphotos)

11 years, 2 months ago

Yes, it appears to have been compromised.

http://sitecheck.sucuri.net/results/www.itsjustlife.co.uk/

Review this FAQ:

http://codex.wordpress.org/FAQ_My_site_was_hacked

Thread Starter dalewood
(@dalewood)

11 years, 2 months ago

Hi

Site back up and running, ran securi scan again and it is verified clean.

I essentiall got a full backup from my ISP, deleted everything in my web space and replaced it with the backup, belt & braces approach, the only folder it would not let me delete was the ftp log folder.

I have of course changed my password, do I need to change my user name, if so what is the best way to do that?

Is there anything else I should do, is there a good plugin which offers site protection, any help is welcome?

Thank you for your help and advice so far

Phil

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Help – I Seem To Have Been Hacked!’ is closed to new replies.

Help – I Seem To Have Been Hacked!

Tags

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics