Help! I think I've been hacked

11 replies
Hey guys

Just got an email from somebody saying they couldn't access one of my offers that got mailed to them via my auto responder.

Now the thing is, I use a special countdown plugin and it appears it's something to do with that as it's happening to every single offer I've used it on.

The plugin generates a special link to send your visitors to, this is one of the links.

http://www.james-scholes.com/Offer/?...YoutubeTraffic

Now instead of it taking the visitors to the "time limited" offer, it insteads download a Java file.

Could someone have a look? I really don't know what to do about this.

Cheers

James Scholes
#hacked
  • Profile picture of the author Valdor Kiebach
    DO NOT CLICK THE LINK IN THE OP!!!!

    It has been hacked, your link is redirecting to
    PHP Code:
    h**p://xbok.ru/smspirat/ 
    and that then downloads the .jar file from
    PHP Code:
    h**p://m.regx.in 
    {{ DiscussionBoard.errors[5601251].message }}
  • {{ DiscussionBoard.errors[5601262].message }}
  • Profile picture of the author bobcarlsjr
    yes, you have been hacked. do a scan for malware, etc on your website.

    check all other sites on the same server/account as well.

    your best bet now is to remove the malware and/or restore to a recent backup.

    good luck
    {{ DiscussionBoard.errors[5601265].message }}
  • Profile picture of the author xxxJamesxxx
    Thanks, but may I ask, how do I scan my site for malware etc?

    Cheers

    James Scholes
    {{ DiscussionBoard.errors[5601274].message }}
  • Profile picture of the author Ron Killian
    Use an ftp program and re-upload your original files, over writing what is there, and remove anything that should not be there. FileZilla can sort files per last modified, so you can see new or recently changed files, good way to get rid of crap.

    This goes to knowing your files, so you can easily spot when something has been changed, or something that isn't right.

    It's also a good idea to check, on a daily basis to make sure nothing has been done.
    Signature
    PLR Affiliate Program Has Launched! Easily Promote Over 5,000 PLR and MRR Products.

    Largest Selection of PLR Articles on the Planet! PLR Ebooks, PLR Video, PLR Websites and more with Private Label Rights
    {{ DiscussionBoard.errors[5601491].message }}
  • Profile picture of the author xxxJamesxxx
    Use an ftp program and re-upload your original files, over writing what is there, and remove anything that should not be there. FileZilla can sort files per last modified, so you can see new or recently changed files, good way to get rid of crap.

    This goes to knowing your files, so you can easily spot when something has been changed, or something that isn't right.

    It's also a good idea to check, on a daily basis to make sure nothing has been done.
    Which files, all of them... Including all the Wordpress files you upload when you first install Wordpress?

    Cheers

    James Scholes
    {{ DiscussionBoard.errors[5601515].message }}
  • Profile picture of the author spearce000
    Get on to your hosting company and let them know about it. If you're on shared hosting the hacker could be getting to your site via another account on the same server. If that is the case, reloading your files will be a waste of time because the hacker will just hack them again.

    It happened to me a couple of years ago, and the only way I could solve the problem was by changing hosting companies, and doing a clean install of my site on a new server.
    {{ DiscussionBoard.errors[5602366].message }}
  • Profile picture of the author canada94
    It happened to me last week James, i bricked it too, just contact your hosting company, they will do a scan for you and sort it out, do you back up your stuff?

    Good luck

    Kevin
    Signature

    [B]If you are looking to turn your ebook into an Amazon bestseller,then visit http://babystepspublishinglimited.com,and let me help you

    {{ DiscussionBoard.errors[5602427].message }}
  • Profile picture of the author Mike Ogbin
    Hello James,

    The sad fact that your hosting account are hacked absolutely.

    The first action to do is to urgently call your web hosting support in case you use legitimate web hosting such as hostgator, hostmonster, bluehost, godaddy and other paid hosting.
    Ask them for the files backup and let this action done by an expert.

    The second sad thing is if you are using a free web hosting, you need to get a backup and open up an account in the hostgator or godaddy or other legitimate web hosting to avoid this kind of actions that destroy all the work and also affect your reputation.

    I hope this will help you in somehow.

    Feel free to thank me if you find this helping you guys
    Signature
    Speedy Up - Jumping game that change your mood and put smile in your face :)
    {{ DiscussionBoard.errors[5602525].message }}

Trending Topics