Meta Desciption Hacked!!

tntsafetysecurity
(@tntsafetysecurity)

12 years, 2 months ago

if you do a site:tntsafetysecurity.com google search, you can see that the first few entries are correct, because i have manually entered in the meta descriptions using Yoast SEO. The other ones however, are spammed with information on casinos (AdSense initially denied my site because of this hack)

There were malicious files in my themes folder, which I have since deleted. I’ve gone through all the lists and step and other information that is constantly repeated on the forums for when your site is hacked. I’ve taken all the necessary steps to harden my wordpress, changed all passwords, added new salts, etc. It has all been done, so PLEASE don’t comment with the same links again, it won’t be helpful.

So basically, what I’m asking is for someone to go through my Exploit Scanner errors (http://tntsafetysecurity.com/exploit-scanner-info.htm) and let me know if any of this is malicious. The scan threw out a lot of base64_decodes and evals, but as far as I can tell they seem okay.

Viewing 9 replies - 1 through 9 (of 9 total)

Thread Starter tntsafetysecurity
(@tntsafetysecurity)

12 years, 2 months ago

does anyone have any feedback on this?

Thread Starter tntsafetysecurity
(@tntsafetysecurity)

12 years, 2 months ago

This is still an issue, not sure if I have completely removed the hack still.. and I’ve gotten no responses from ANYONE here or on Stack Overflow.

Google Webmaster Tools is still showing “casino” keywords. Here is a screenshot: click here

I would REALLY appreciate some help with this… It has been driving me insane for the past week!

kmessinger
(@kmessinger)

12 years, 2 months ago

You should post here, https://wordpress.org/support/plugin/exploit-scanner

Only folks that use that plugin might know what you are talking about. You won’t get any response unless a volunteer has an idea. Otherwise nada.

Securi show the site is ok. http://sitecheck3.sucuri.net/results/tntsafetysecurity.com/

Thread Starter tntsafetysecurity
(@tntsafetysecurity)

12 years, 2 months ago

kmessinger, I’ve already looked through their support and it didn’t help too much.
I also forgot to add that I’ve since stopped using exploit scanner, and I’ve installed wordfence to see what they pulled up — which was nothing really, there were a few core theme files that were changed, but it was only blank spaces or edits I have done myself.

Evan Herman
(@eherman24)

12 years, 2 months ago

Check your site with Sucuri site checker.

It looks clean to me.

wilsonjoseph
(@wilsonjoseph)

12 years, 2 months ago

i had a same issues on my few sites,

I installed Wordfence Security and scan the files, the hack is not in header or php files, it was in the theme folder file name (social.png).
There were ten files from (social.png, social0.png to social9.png), and i deleted the file and submitted to google webmaster tools, fetch as google.
and checked it, and there were no casino links on my header.

wilsonjoseph
(@wilsonjoseph)

12 years, 2 months ago

i had a same issues on my few sites,

I installed Wordfence Security and scanned the files, it showed all secure without scanning the theme and plugin folder, so i enabled the Wordfence security to scan the theme and plugins from settings and saved, then i re-scanned it, it showed some hack files on themes folder (wp-content/themes/theme-name). the hack is not in header or php files, it was in the theme folder file name (social.png).
There were ten files from (social.png, social0.png to social9.png), and i deleted the file and submitted to google webmaster tools, fetch as google.
and checked it, and there were no casino links on my header.

Please check if it works for you…

Consciousness
(@consciousness)

11 years, 10 months ago

Hi – it looks like I’ve had this same issue. Casino descriptions. I deleted the various social_.png ‘s. How do I check if it is the descriptions-hack is cleared in Google? The fetch in google webmaster is saying “temporarily unreachable”.

Consciousness
(@consciousness)

11 years, 10 months ago

Update: I can do fetch google now but I don’t know what I should look for in there…. ??