Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?



Login with username, password and session length
February 09, 2012, 04:43:26 PM

Pages: [1]   Go Down
  Print  
Author Topic: I think my site is hacked....what do I do?  (Read 1864 times)
jaybird67k
Trekkie
**
Offline Offline

Posts: 18


WWW
« on: September 07, 2009, 11:09:21 AM »

I recently was warned by Google that my site could harm my computer and when I went to my site my anti virus said it blocked something.
I have some weird writing at the bottom of each of my pages that appear to be advertisment.
I need some help figuring out what happened how to fix it and how to avoid it in the future, I rarely go to my site because it's just a infomation site but please don't go there unless you have anti virus.....I have Avast.

My Site is www.sleepinranger.com

Any help would be greatly appreciated.

Thanks in advance, Jason
Logged

Mitch
Berserker Poster
*****
Offline Offline

Posts: 12838


WWW
« Reply #1 on: September 07, 2009, 11:24:23 AM »

Very sorry to hear you are having problem, first step would be to read over some of the threads here:

http://www.lunarforums.com/lunarpages_security_center-b34.0/

You'll find lot of good advice there. 

also follow some of the suggestions here:

http://wiki.lunarpages.com/Web_Site_Security_Breaches

To start things out, be sure also to do a clean sweep on your computer and any other computer you have worked on this site with.  I would suggest:

1 online anti-virus scanner (full scan)
1 installed anti-virus scanner (full scan)
1 or more anti-spyware or anti-malware programs

You can find suggestions for those here:

http://www.lunarforums.com/lunarpages_security_center/free_antivirus_and_antispyware_programs-t53253.0.html

Once you are sure your PC is clean, then you need to start looking at your web site files, and seeing if any have been changed - or if new files or folder have been inserted.  Also be sure to check system files like the .htaccess file for injected information.

Check file and folder permissions too, in most cases the highest files should be set for is 644 and folder 755.

If you have any installed scripts (no matter if you installed them and you are using them, or you installed them once, decided against using it and never messed with it again) be sure they are up to date with the latest version released from the script creator's official site.

Hope that helps to get you started!
Logged

New to Web Site Hosting? Check Out the Lunarpages Blog Hosting Guide!


Follow us @lunarpages on Twitter!
Important Threads: Read This Before Posting! | Lunarforums Rules! | Mitch's Link of the Day!
Also, be sure to check out and subscribe to the Lunartics Blog and the Lunarpages Newsletter !

Need Web Hosting Help? Check out the Lunarpages Web Hosting Wiki. It has tons of tips, tutorials and resources!
jaybird67k
Trekkie
**
Offline Offline

Posts: 18


WWW
« Reply #2 on: September 08, 2009, 05:07:18 PM »

Thanks for the help Mitch. This is alot for me to digest, I was hoping I could crash the site and
just reload it since I had made a online backup.

Thanks, Jason
Logged

Mitch
Berserker Poster
*****
Offline Offline

Posts: 12838


WWW
« Reply #3 on: September 09, 2009, 04:15:32 AM »

You could restore your information from a backup (might contact support@lunarpages.com for more help with that) however, you might also want to take the steps above to make sure that you are not infected in any way, which in turn would just re-infect your web site as soon as you got it restored.
Logged

New to Web Site Hosting? Check Out the Lunarpages Blog Hosting Guide!


Follow us @lunarpages on Twitter!
Important Threads: Read This Before Posting! | Lunarforums Rules! | Mitch's Link of the Day!
Also, be sure to check out and subscribe to the Lunartics Blog and the Lunarpages Newsletter !

Need Web Hosting Help? Check out the Lunarpages Web Hosting Wiki. It has tons of tips, tutorials and resources!
Saitia
Newbie
*
Offline Offline

Posts: 1


« Reply #4 on: September 17, 2009, 06:22:14 PM »

Lunarpages is suggesting my blog got hacked today; they moved it to another server; and then an admin denied permissions for the index.php file. At this writing I can't even get to the cpanel to work on it;  it times out; and LP mail server has rejected all attempts to take my accounts online.  In short, I need some help!

Can someone/anyone who knows WP assist me by looking at these files to see if that's true?  And if so...
They're (LP )suggesting someone uninstall WP and reinstall it without deleting my database; anyone up for that??

Thanks!!
Saitia
Logged
Mitch
Berserker Poster
*****
Offline Offline

Posts: 12838


WWW
« Reply #5 on: September 18, 2009, 11:11:30 AM »

There are several ways to back up a database for WordPress.  Here's one from their official site:

http://codex.wordpress.org/Backing_Up_Your_Database

and also, there are more than a few plugins that might help too:

* http://wordpress.org/extend/plugins/search.php?q=database+backup

Logged

New to Web Site Hosting? Check Out the Lunarpages Blog Hosting Guide!


Follow us @lunarpages on Twitter!
Important Threads: Read This Before Posting! | Lunarforums Rules! | Mitch's Link of the Day!
Also, be sure to check out and subscribe to the Lunartics Blog and the Lunarpages Newsletter !

Need Web Hosting Help? Check out the Lunarpages Web Hosting Wiki. It has tons of tips, tutorials and resources!
Pages: [1]   Go Up
  Print  
 
Jump to: