by preets
18 replies
Hi Warriors ,

My site was working fine till last evening , but when I tried to login to my wp admin , it was redirected to a unknown page and browser shows :
http://amihomebiz.com/home/amihomeb/...2.ru/frunleh?9

Help me to solve this problem

Thanks
#problem #wordpress
  • Profile picture of the author JesseN
    Looks like your site has been hacked. You might want to do a scan of your site and find out what's causing it. If you have a recent clean backup of your site maybe two to three days before your site got hacked then delete all the present files on your home directory and use the clean back up. That is only if you're absolutely sure that the backup is clean and that you have both the SQL database and the files backup. By the way, were you using the latest version of Wordpress, the theme you're using and plugins?

    Here are some resources you could read for more info:
    http://codex.wordpress.org/FAQ_My_site_was_hacked
    {{ DiscussionBoard.errors[6568152].message }}
  • Profile picture of the author kasei
    Try to run a few malware scans. You can use Sucuri SiteCheck. Also it's a good idea to upgrade your wordpress version.
    {{ DiscussionBoard.errors[6568283].message }}
  • Profile picture of the author John Ayling
    If you look at your wordpress files via an ftp program and notice that the last modified date is very recently, then odds on your site has been hacked.
    Signature
    Software Marketing & Licensing System for WordPress Plugins, Themes & .NET Software
    >> 72 Hour Special <<
    {{ DiscussionBoard.errors[6568320].message }}
  • Profile picture of the author locke815
    What host do you use? You can actually ask for the most recent backups on your files if your host do provide 24/7 support.
    {{ DiscussionBoard.errors[6568551].message }}
    • Profile picture of the author preets
      I am using znetlive , and they are unable to provide any solution yet.

      Pls help


      Originally Posted by locke815 View Post

      What host do you use? You can actually ask for the most recent backups on your files if your host do provide 24/7 support.
      Signature
      BUY HIGH QUALITY BACKLINKS | Party Supplies Singapore | Affordable SEO Services
      Wordpress Developer | Sales Page Designing | Affiliate Site Development | HTML Website |
      {{ DiscussionBoard.errors[6569178].message }}
      • Profile picture of the author kdavies
        It's been hacked by a hacker (but not a very good one).

        Check for any files that have been changed recently and in those files check for the string "htttp://reltime2012.ru/frunleh?9" and try commenting out those lines that contain that string.

        If you still have problems feel free to pm me.
        {{ DiscussionBoard.errors[6571702].message }}
  • Profile picture of the author teguhyuliantos
    Do you have checked it there? Or you ever install plugin that not support for your wordpress version? Some plugin should be update first before install in new wordpress version.
    {{ DiscussionBoard.errors[6572415].message }}
  • Profile picture of the author webdv
    Look for recent changes in header.php and footer.php files in your theme folder. Also look for any recent changes in your /wp-includes/functions.php. If you know PHP then you can check out the changes yourself, else mail me the files - i will have a look.
    {{ DiscussionBoard.errors[6575674].message }}
  • Profile picture of the author slc4us
    You should consult with your hosting person because this seems to be the problem of hacking of spamming so he/she will suggest you better malware or any protection plugins for wp.
    {{ DiscussionBoard.errors[6576804].message }}
  • Profile picture of the author LoriwC
    I had a very similar problem and Hostgator sorted it out for me.
    {{ DiscussionBoard.errors[6577578].message }}
  • Profile picture of the author jaasmit
    As far as i know it looks like you are having a pretty good trouble. Your site might have get hacked. In order to overcome from this you need to reinstall it using your backup.
    {{ DiscussionBoard.errors[6611692].message }}
  • Profile picture of the author biz_online
    Originally Posted by preets View Post

    Hi Warriors ,

    My site was working fine till last evening , but when I tried to login to my wp admin , it was redirected to a unknown page and browser shows :
    http://amihomebiz.com/home/amihomeb/...2.ru/frunleh?9

    Help me to solve this problem

    Thanks

    This is a very common problem. Your .htaccess file has been rewritten.

    WordPress › Support » .htaccess Hacked, Redirects to Russion Site

    Make sure you check every single folder and directory and edit your .htaccess file.

    Once you have removed the redirects, you need to make sure that you set your .htaccess to "ready only" CHMOD.

    Don't add ANY plugins that require that you write to your .htaccess files or you will lose all that you gained and get hacked again.

    Stay away from "BulletProof"security type plugins because they actually do more harm than good.:confused:

    Good luck!
    Signature

    {{ DiscussionBoard.errors[6612261].message }}
  • Profile picture of the author biz_online
    Originally Posted by preets View Post

    Hi Warriors ,

    My site was working fine till last evening , but when I tried to login to my wp admin , it was redirected to a unknown page and browser shows :
    http://amihomebiz.com/home/amihomeb/...2.ru/frunleh?9

    Help me to solve this problem

    Thanks
    Your .htaccess file was hacked. You need to make it READ ONLY - CHMOD

    WordPress › Support » .htaccess Hacked, Redirects to Russion Site
    Signature

    {{ DiscussionBoard.errors[6612276].message }}
  • Profile picture of the author CodeShack
    is it still doing it? if so pop over your site address, we can start hunting from there

    You don't need to re-install from a backup that's utter rubbish and I would only do that as a last resort.

    There is a very good chance you've been either been hacked, uploaded infected plugin/theme or injected with malware - most times you can manually fix it

    Cheers,
    {{ DiscussionBoard.errors[6612717].message }}
  • Profile picture of the author annahussy
    You just need to one thing that remove the all viruses or malwares. That will be great solution for you to run a word press on your PC. Might be It will also affect your PC and You faced this problem.
    {{ DiscussionBoard.errors[6615417].message }}
  • Profile picture of the author James Andy
    I agree with anna, you should first remove all the viruses from your PC with Avira antivirus. I have been using this for a while and had a good responce.
    {{ DiscussionBoard.errors[6621972].message }}
    • Profile picture of the author garbage66
      Install Bulletproof security and enable it. Create new .htaccess and secure it.

      If you can access the admin login page, log in to your website, go the html/<your website> directory and rename .htaccess to ".htaccess.bac". The server (or the security plugin) will recreate a new one.

      HTML Code:
      My site: www.securesmb.ca
      {{ DiscussionBoard.errors[6659484].message }}
  • Profile picture of the author teguhyuliantos
    I think your site have been cracker by spyware program. I have experience like you. To solve your problem, you can ask to your hosting service and request to solve your problem. Usually, they will be resolve trough cpanel admin.
    {{ DiscussionBoard.errors[6660260].message }}

Trending Topics