32 {{ upvoteCount | shortNum }}
32 {{ upvoteCount | shortNum }}

My Websites got Hacked

by kochtgr
32 replies
I need your help guys. Most of my sites on my hostgator server got hacked and they really don't care to help so check below the details and if anyone knows how this can be solved I would be really grateful!

All started when I got messages from google that some of my sites might have been hacked, I check the webmaster tools but they didn't have any specific info.

In google analytics I saw that some of my sites were getting more than what they used to organic traffic and when I checked it, the landing pages of all this traffic were some irrelevant pages that I had never created myself and when I go to see what they look like they don't actually exist. Even though they don't exist when I make a google search I see that they are indexed on google (check the screenshot)

I tried to see if I can find these pages via the file manager and the databases on phpmyAdmin on cpanel and even though I found some strange pages on the databases and I deleted them the traffic to these no existant pages continues coming. The status of these pages was "test" which I have no idea what means since they didn't exist on wordpress.

Additionally all this time I was getting a tone of user subscriptions on wordpress and even though I deleted most of these accounts and after a few plugins I stopped them when I go to see these accounts on wordpress a huge number appears without however any account existing (check one of the screenshots)

I watched the videos on google with the steps for cleaning a site but they don't really apply to my own problem since they are not showing any similar problem...

I really don't know what else I should do since I did most of the things that are suggested when a site gets hacked (changed pws , added more security plugins, removed any strange database and content via cpanel etc)

Please help me

Screenshots:
http://postimg.org/image/6c5o9nsc7/
http://postimg.org/image/c9oug2jjp/
#hacked #hacked website #sites #website security #websites #wordpress security
  • Profile picture of the author DRP
    Contact your hosting provider immediately. Tell them you got hacked and they should clean it up for you. They might even do it for free, actually. Even if they don', it'll cost like $15. Get on it.
    Signature
    I'd rather tell you an ugly truth than a pretty lie.
    {{ DiscussionBoard.errors[10553620].message }}
    • Profile picture of the author kochtgr
      I have already done that but hostgator sucks, they really don't care (I will certainly look for a new provider).
      Signature
      {{ DiscussionBoard.errors[10553632].message }}
    • Profile picture of the author DWolfe
      Originally Posted by DRP View Post

      Contact your hosting provider immediately. Tell them you got hacked and they should clean it up for you. They might even do it for free, actually. Even if they don', it'll cost like $15. Get on it.
      How do you know they will only charge $15.00 have you actually had that problem ? What did they do for $15.00 that sounds dirt cheap.

      To the Original Poster my sites are with a different company and the charge to fix them is a lot higher. If you switch host's make sure your sites are much harder to break into !

      Good luck with the outcome.
      {{ DiscussionBoard.errors[10553787].message }}
      • Profile picture of the author DRP
        Originally Posted by DWolfe View Post

        How do you know they will only charge $15.00 have you actually had that problem ? What did they do for $15.00 that sounds dirt cheap.
        I've had this problem 2 times over the past 7 years. Each time, Hostgator has cleaned up the mess for FREE. I don't remember the details, but I remember the customer support specialist telling me that if it happened again (within a year I think), that I would be charged a nominal fee. It was $15-$20 something stupid cheap and I was like "yeah whatever, anything to clean it up." People bitch about Hostgator, but I've had no issues with them. Results will vary, I guess.
        Signature
        I'd rather tell you an ugly truth than a pretty lie.
        {{ DiscussionBoard.errors[10553840].message }}
    • Profile picture of the author nicheblogger75
      Originally Posted by DRP View Post

      Contact your hosting provider immediately. Tell them you got hacked and they should clean it up for you. They might even do it for free, actually. Even if they don', it'll cost like $15. Get on it.
      He's already said that his hosting provider was not helpful. HostGator will no longer assist you with cleaning up malware, backups, hacking, etc, for free. They will ask you to enroll in their SiteLock program to the tune of $16.67 per month.

      When I got my first HG account 7 years ago, they were awesome and easily the best shared hosting choice for Internet Marketers. It's no secret that since they were purchased by EIG in 2012 they are only a shell of the company they once were.

      They were purchased in June 2102 and by the end of August there was a huge increase in down time, lack of customer service, and charges for services that used to be provided for free.

      The bottom line is HG is no longer the HG we all used to know and love. Do a search for "EIG complaints" and by the time you get to the middle of the first page of results I can almost guarantee you'll want to change your hosting provider.
      Signature
      FREE YouTube Marketing Playbook Video Course (20 Videos)
      {{ DiscussionBoard.errors[10553952].message }}
  • Profile picture of the author pwdta37
    You need to take help from the help desk of the Hosting. If you can access to your site control, you should access & edit yourself if it is possible & change the access details.
    Signature
    soon
    {{ DiscussionBoard.errors[10553630].message }}
  • Profile picture of the author DRP
    Maybe you should be nice to them. Hostgator has always helped me out with malware and hacker attacks...and done so for free.
    Signature
    I'd rather tell you an ugly truth than a pretty lie.
    {{ DiscussionBoard.errors[10553651].message }}
  • Profile picture of the author pwdta37
    [DELETED]
    {{ DiscussionBoard.errors[10553655].message }}
    • Profile picture of the author kochtgr
      Originally Posted by DRP View Post

      Maybe you should be nice to them. Hostgator has always helped me out with malware and hacker attacks...and done so for free.
      I am really more than nice with them, it's been a month and they reply with generic answers (each time a different person ) and the final ones is their suggestion to buy securitylock subcriptions for a long time period which is ridiculous expensive. I though too that hostgator would be good when it comes to support and they were in the past but now they really suck, I a made research here on warrior forum to see if I can find any helpful thread and most threads that I found about hacked websites were from hostgator clients and all of us agree that hostgator support sucks!

      Originally Posted by pwdta37 View Post

      You need to take help from the help desk of the Hosting. If you can access to your site control, you should access & edit yourself if it is possible & change the access details.
      The problem is not if I can access the cpanel and wordpress admin since I have no problem with that. I have done all the suggested changes but my main problem is with what google sees and I don't see via file manager and cpanel since they index spammy pages that don't exist
      Signature
      {{ DiscussionBoard.errors[10553689].message }}
      • Profile picture of the author BrendaRKl
        Originally Posted by kochtgr View Post

        I though too that hostgator would be good when it comes to support and they were in the past but now they really suck,
        I have found this to be the case, as well, so you're not alone.

        Sorry to hear about your problem!
        {{ DiscussionBoard.errors[10557557].message }}
  • Profile picture of the author danieldesai
    To the OP, I really am sorry that you got hacked.

    If you want a hosting provider that actually cares about their customers and has good protection (and clean-up) against hackers, try WP Engine.

    Regards,
    Daniel
    {{ DiscussionBoard.errors[10553773].message }}
  • Profile picture of the author MSutton
    I hope you backed up your sites. If so, get them back up and running and move to a better host. Hostgator is too big to care about small clients and some of the support "specialists" have no problem telling you that if you get them on the right day.

    Smaller companies tend to care more about their smaller clients because that is mostly what they have and the hosting business is ultra competitive. Companies like HG are popular only because they have deep pockets for advertising and affiliate programs that pay out mega commissions per signup...therefore everyone and their brother promotes them. Sure, you'll pay more but you know what they say, he who buy cheap buys twice.

    But no matter if you stay with HG or move, you must get into a habit of backing up your sites!
    {{ DiscussionBoard.errors[10553777].message }}
    • Profile picture of the author kochtgr
      Originally Posted by MSutton View Post

      I hope you backed up your sites. If so, get them back up and running and move to a better host. Hostgator is too big to care about small clients and some of the support "specialists" have no problem telling you that if you get them on the right day.

      Smaller companies tend to care more about their smaller clients because that is mostly what they have and the hosting business is ultra competitive. Companies like HG are popular only because they have deep pockets for advertising and affiliate programs that pay out mega commissions per signup...therefore everyone and their brother promotes them. Sure, you'll pay more but you know what they say, he who buy cheap buys twice.

      But no matter if you stay with HG or move, you must get into a habit of backing up your sites!
      I don't have any recent back up since I though hostgator was doing it automatically and now they don't actually do it above a limit.

      Does anyone have any idea how a page can be indexed on google when it doesn't actually exist? (atleast from the user point of view) and why would someone hack a site to do that?
      Signature
      {{ DiscussionBoard.errors[10553789].message }}
      • Profile picture of the author MSutton
        Originally Posted by kochtgr View Post

        Does anyone have any idea how a page can be indexed on google when it doesn't actually exist? (atleast from the user point of view) and why would someone hack a site to do that?
        Not 100% sure what you mean. But Blackhat SEO experts can do just about anything they put their mind to. Cloaking comes to mind.
        {{ DiscussionBoard.errors[10553796].message }}
        • Profile picture of the author kochtgr
          Originally Posted by MSutton View Post

          Not 100% sure what you mean. But Blackhat SEO experts can do just about anything they put their mind to. Cloaking comes to mind.
          Irrelevant spammy pages on my domain that are not live and as far as I know never were are indexed in google.

          Check this screenshot: View image: hacked pages
          Signature
          {{ DiscussionBoard.errors[10553802].message }}
          • Profile picture of the author MSutton
            Is this your home page? If so, your index page was hacked. Check your other pages. Are they hacked, too?
            {{ DiscussionBoard.errors[10553809].message }}
            • Profile picture of the author kochtgr
              Originally Posted by MSutton View Post

              Is this your home page? If so, your index page was hacked. Check your other pages. Are they hacked, too?
              About which page you are talking about? This is a screenshot with 2 pages (there are many more) as they appear in the google results. These pages don't exist on my site (pretravels)
              Signature
              {{ DiscussionBoard.errors[10553825].message }}
            • Profile picture of the author kilgore
              Here's what I'd do:
              1. Get a new web hosting account. It can be with Hostgator or with someone else. But if your current site is compromised, there's no telling what backdoors have been left that you'll never be able to find.
              2. Reinstall everything from scratch on this new account. This includes software (whether Wordpress or whatever else you might have installed), plugins, themes, etc. If you have files such as images, videos or other documents that are unique to your site, try to source these from backups or your hard drive rather than copying them from the compromised server. While the images, videos, etc. are probably (probably) fine, there may be other files purposely mixed in these folders by the hackers that could compromise your site all over again.
              3. If you have a database, again try to restore from a backup. But since it sounds like you don't have backups, you may just have to load it on the new site and cross your fingers. But before you do, you should at least scan it carefully looking for (and removing) any potential malicious database entries.
              4. The same goes if you have any custom code. Again, ideally you have backups, but if not look it over line by line before uploading it to your new server.
              5. Set up your new site to do automatic backups. These should happen at least once per day -- I prefer hourly backups, though this may be overkill if your site isn't well trafficked.
              Another thing I recommend is creating a development --> production workflow. You can even set up your workflow so that your production (public) website is just a copy of your develpment (private) website. This is a bit more complicated to set up; however, I think it's well worth it from both a security and an availability perspective.
              Signature
              {{ DiscussionBoard.errors[10553844].message }}
  • Profile picture of the author GlobalTrader
    I have been working online in one form or another since 1988. Am I an expert, by no means, however, I have seen my share of fraud and in all those years I never had a hacking incident until I moved my main website to HG in August of last year. To make a 'long' story shorter, I have a reseller acct and thought I would save $180 a year by moving my main site to that account.

    In late October I was unable to log into any of my sites nor my WHM reseller acct. HG tech wanted to blame me for weak passwords and my reply was if 37 characters, lower and upper case letters, number and symbols is not enough to deter these people then we all might as well give up. Once WHM was reset I changed all the pswds and within 24 hours I was locked out again. The HG suggestion was the Slock service they are now partnered with and I insisted that after having a site up for nearly 17 years it was never hacked until I moved it to my HG acct and that I believe their server had been compromised.

    Found multiple new directories of hacker files in about 7 of my 10 sites, performed multiple scans using Sucuri. Finally after 10 days HG security got back to me, admitted there was a script that had been loaded to the server that gave my pswds to the hacker everytime I changed them. HG reset my WHM pswd and all my site pswds again and I began implementing even greater security measures on each site beyond what I already had which meant nothing when they had direct login access because of their nefarious server script.

    Couple of suggestions that might help - run Sucuri on your sites - it costs nothing to do so and helps to identify problem areas, if there are any, that you should be able to then clean out, here is the link:

    https://sitecheck.sucuri.net/

    I am on a shared hosting reseller account - from what I have read there is no way of logging into your sites securely via FTP on a shared hosting acct, other than the main WHM acct. The only secure login is via Cpanel with your IP address - here is an example of what I am talking about - this is not an actual site, just numbers to provide an example followed a :2083 - here is an example - HG has instructions on this within their knowledgebase -

    https://134.265.46.31:2083

    All In One WP Security
    Anti-Malware Security and Brute Force Firewall
    BulletProof Security
    IQ Block Country (have to download a GeoIP database to use)
    Wordfence Security
    WP-SpamShield

    You do not need to activate all aspects of the above plugins, some charge to do so, however, All In One WP Security and Wordfence are proving to be my favorites. Wordfence sends me an email everytime I log into the wordpress part of the site (it does not do so for cpanel logins). Wordfence also sends me an email when there is a problem with a plugin, mostly due to an update being available.

    Ultimately, the hacking incident helped me make the decision to move towards full retirement rather than part-time as I was and I have begun liquidating all sites that simply were not worth my time and will most likely be into full retirement by the end of this year.

    IRT to your question about how the big G would index a page you cannot find, I do not know except to guess that the hacker had a redirect to the page name you are finding indexed? One other suggestion, if you think they had cpanel access, you may wish to review your .htaccess file to see if there are any redirects set up in there and look at the last date it was changed before you open it to make any changes yourself.

    Hope this helps. Good luck!
    Signature

    GlobalTrader

    {{ DiscussionBoard.errors[10553866].message }}
    • Profile picture of the author kochtgr
      Originally Posted by GlobalTrader View Post

      I have been working online in one form or another since 1988. Am I an expert, by no means, however, I have seen my share of fraud and in all those years I never had a hacking incident until I moved my main website to HG in August of last year. To make a 'long' story shorter, I have a reseller acct and thought I would save $180 a year by moving my main site to that account.

      In late October I was unable to log into any of my sites nor my WHM reseller acct. HG tech wanted to blame me for weak passwords and my reply was if 37 characters, lower and upper case letters, number and symbols is not enough to deter these people then we all might as well give up. Once WHM was reset I changed all the pswds and within 24 hours I was locked out again. The HG suggestion was the Slock service they are now partnered with and I insisted that after having a site up for nearly 17 years it was never hacked until I moved it to my HG acct and that I believe their server had been compromised.

      Found multiple new directories of hacker files in about 7 of my 10 sites, performed multiple scans using Sucuri. Finally after 10 days HG security got back to me, admitted there was a script that had been loaded to the server that gave my pswds to the hacker everytime I changed them. HG reset my WHM pswd and all my site pswds again and I began implementing even greater security measures on each site beyond what I already had which meant nothing when they had direct login access because of their nefarious server script.

      Couple of suggestions that might help - run Sucuri on your sites - it costs nothing to do so and helps to identify problem areas, if there are any, that you should be able to then clean out, here is the link:

      https://sitecheck.sucuri.net/

      I am on a shared hosting reseller account - from what I have read there is no way of logging into your sites securely via FTP on a shared hosting acct, other than the main WHM acct. The only secure login is via Cpanel with your IP address - here is an example of what I am talking about - this is not an actual site, just numbers to provide an example followed a :2083 - here is an example - HG has instructions on this within their knowledgebase -

      https://134.265.46.31:2083

      All In One WP Security
      Anti-Malware Security and Brute Force Firewall
      BulletProof Security
      IQ Block Country (have to download a GeoIP database to use)
      Wordfence Security
      WP-SpamShield

      You do not need to activate all aspects of the above plugins, some charge to do so, however, All In One WP Security and Wordfence are proving to be my favorites. Wordfence sends me an email everytime I log into the wordpress part of the site (it does not do so for cpanel logins). Wordfence also sends me an email when there is a problem with a plugin, mostly due to an update being available.

      Ultimately, the hacking incident helped me make the decision to move towards full retirement rather than part-time as I was and I have begun liquidating all sites that simply were not worth my time and will most likely be into full retirement by the end of this year.

      IRT to your question about how the big G would index a page you cannot find, I do not know except to guess that the hacker had a redirect to the page name you are finding indexed? One other suggestion, if you think they had cpanel access, you may wish to review your .htaccess file to see if there are any redirects set up in there and look at the last date it was changed before you open it to make any changes yourself.

      Hope this helps. Good luck!
      Thanks for the detailed post, I checked all my sites at https://sitecheck.sucuri.net but it didn't find any infection. Regarding the plugins you mentioned I already use wordfence on all my sites.

      The spammy indexed pages do not redirect anywhere, when I click them they just show a 404 page. There is no actual problem from a user point of view. The only problem that it seems to cause is that google might rank lower the real pages of my sites since the spammy non existant indexed pages are actually more than the real ones and they are totally irrelevant. Plus some times google might show in the search results that my sites are hacked, making users not visit my sites...
      Signature
      {{ DiscussionBoard.errors[10553919].message }}
    • Profile picture of the author kilgore
      Originally Posted by GlobalTrader View Post

      I am on a shared hosting reseller account - from what I have read there is no way of logging into your sites securely via FTP on a shared hosting acct, other than the main WHM acct. The only secure login is via Cpanel with your IP address
      Keep in mind that a hacker doesn't need to login to your site via FTP.

      All they need to do is get a single file onto your server and then they literally own you. With that one file, they can download other files onto your site (including more malicious code), modify your database, upload data from your site to another server they control, use your site to attack yet more sites, force malicious downloads on your users, capture passwords entered into the site etc., etc., etc.

      Depending on how the shared hosting account was configured by HG, they may be able to limit some of the damage being done -- though most of these limits are designed to prevent infections in one account from spreading to other accounts on the same shared server rather than limited damage to the infected account.

      This is why I suggest starting (as much as possible) with clean code. It's a lot of work, but once you've been compromised how else can you make sure that every single file on your account is safe?
      Signature
      {{ DiscussionBoard.errors[10553963].message }}
  • Profile picture of the author GlobalTrader
    I just checked and Google Webmaster still has a removal tool - you can read about it here:
    https://support.google.com/webmaster.../1663419?hl=en
    Signature

    GlobalTrader

    {{ DiscussionBoard.errors[10553938].message }}
    • Profile picture of the author kochtgr
      Originally Posted by GlobalTrader View Post

      I just checked and Google Webmaster still has a removal tool - you can read about it here:
      https://support.google.com/webmaster.../1663419?hl=en
      Thanks however I have done that for some pages but it doesn't remove the google's hacking note/ban plus it's temporarely and the pages are hundreds so I cannot do it for all of them.

      Lastly even if it worked it wouldn't solve the actual problem and I need to know how I can remove them from my sites forever...
      Signature
      {{ DiscussionBoard.errors[10553957].message }}
    • Profile picture of the author TheGMa
      Having nothing but the image of the hacked page to view, I couldn't access the source code to see what's going on.

      Boy, let the games begin.

      The links under the lovely ladies are routed through Steepto, an affiliate network owned by Bedigital Corp. in Belize. Contact to advise they are being used by hackers: bedigitalcorp1@gmail.com. They have a back door flapping in the wind somewhere, and it's most likely in their internal network. They purchased the domain via GoDaddy and may be hosted with them.

      From there, the path is re-routed to a John Dick (splurt!) org, beautysecretsexposed.co

      Must be a niche builder because he has around 165 other domains. Again, the registrar is GoDaddy but the site is sitting on a BlueHost server.

      This is the website title: [Amazon icon]Beauty Secrets | Beauty Secrets. Skin Care Beauty, get The Looks!

      Wow. The dude has a 90% SEO rate!

      To start a tracking report on the hacker, send your complaint, using the same clarity as in your OP, to BlueHost: Please report abuse to tos@BlueHost.com.

      Now head to Warriors For Hire and find someone who can fix your site.

      - Annie
      {{ DiscussionBoard.errors[10554010].message }}
      • Profile picture of the author kochtgr
        Originally Posted by TheGMa View Post

        Having nothing but the image of the hacked page to view, I couldn't access the source code to see what's going on.

        Boy, let the games begin.

        The links under the lovely ladies are routed through Steepto, an affiliate network owned by Bedigital Corp. in Belize. Contact to advise they are being used by hackers: bedigitalcorp1@gmail.com. They have a back door flapping in the wind somewhere, and it's most likely in their internal network. They purchased the domain via GoDaddy and may be hosted with them.

        From there, the path is re-routed to a John Dick (splurt!) org, beautysecretsexposed.co <<DO NOT CLICK TO THIS PAGE: IT APPEARS TO CONTAIN MALWARE.

        Must be a niche builder because he has around 165 other domains. Again, the registrar is GoDaddy but the site is sitting on a BlueHost server.

        This is the website title: [Amazon icon]Beauty Secrets | Beauty Secrets. Skin Care Beauty, get The Looks!

        Wow. The dude has a 90% SEO rate!

        To start a tracking report on the hacker, send your complaint, using the same clarity as in your OP, to BlueHost: Please report abuse to tos@BlueHost.com.

        Now head to Warriors For Hire and find someone who can fix your site.

        - Annie
        Hi Annie, thanks for the interest but this has nothing to do with my site, this is the image hosting site which seems to have many ads in the images. There is no screenshot of my sites, there is only s screenshot with 2 results that appear on google with 2 pages of my site that eventhough they are indexed they don't exist in my site and the other is a screenshot from the wordpress dashboard showing the users number (1600) eventhough they do not exist
        Signature
        {{ DiscussionBoard.errors[10554049].message }}
  • Profile picture of the author Chris Chicas
    "my main problem is with what google sees and I don't see via file manager and cpanel since they index spammy pages that don't exist"

    I think you are approaching the problem from the wrong angle. This is not a Hostgator/hosting problem that you now have at hand. You are talking about Google pages being indexed.

    I would say to go into Google's Webmaster tools and begin working from there.
    - Are there any notes on Webmaster tool that you can follow?
    - Can you contact anyone on there and tell them your issue?

    Continue to put original content into your site, and along with using webmaster tools, you should to slowly get out of this slump.

    It's a start. It takes time.
    Signature
    TwinFlameSecret.com
    {{ DiscussionBoard.errors[10554070].message }}
    • Profile picture of the author kochtgr
      Originally Posted by Chris Chicas View Post

      "my main problem is with what google sees and I don't see via file manager and cpanel since they index spammy pages that don't exist"

      I think you are approaching the problem from the wrong angle. This is not a Hostgator/hosting problem that you now have at hand. You are talking about Google pages being indexed.

      I would say to go into Google's Webmaster tools and begin working from there.
      - Are there any notes on Webmaster tool that you can follow?
      - Can you contact anyone on there and tell them your issue?

      Continue to put original content into your site, and along with using webmaster tools, you should to slowly get out of this slump.

      It's a start. It takes time.
      Hi Chris, google just says that the sites were hacked and doesn't provide any extra info. I need to fix the cause of this problem in order to resubmit the sites on google. I have followed all the steps that I could find on google's videos for hacked sites but they don't mention anything about the issues I have. These pages do not exist on wordpress and are not visible so I need first to find the code and remove it from my sites before resubmit them on google...
      Signature
      {{ DiscussionBoard.errors[10554582].message }}
  • Profile picture of the author Rory Singh
    Signature
    My #1 Recommended System For Earning
    rory singh TIKTOK
    {{ DiscussionBoard.errors[10554687].message }}
    • Profile picture of the author TheGMa
      Sorry my post wasn't helpful, Mike, and thanks for replying. Dang. So I take it your site is pretravels? I hunted down the specific wording of the titles for those fake ads and nothing comes up. Yeah, weird.

      Have you tried going through the Warriors for Hire to see if any of the techies in there can take care of this? Hey, it's worth a try 'cause the suggested Google Webmaster Tools aren't geared for anything like this.

      Off topic: If that is your site, it's cool that you're on Page 2 in the results. You should make Page ! with a bit more SEO work and GRAPHICS. You can pick up a ton of free ones for commercial use at Pixabay. Be sure to give the graphics alternate text for our little robot friends to index.

      - Annie
      {{ DiscussionBoard.errors[10554733].message }}
      • Profile picture of the author TheGMa
        One last try.

        While studying about backlinks, I was directed to this article about Negative SEO Attacks and immediately thought of you. I think you will identify with the content and solution.

        How to Protect Your Website from Negative SEO

        - Annie
        {{ DiscussionBoard.errors[10555712].message }}
  • Profile picture of the author kochtgr
    Thanks for advices Annie...
    Signature
    {{ DiscussionBoard.errors[10556890].message }}
  • Profile picture of the author harris96
    Most of sites got hacked due to several server problems. And to be honest we cannot know how to fix the hacking issues. That's why I always prefer to choose the best hosting provider which really cares to their customers and always there to help. I'd recommend Sitegorund. No doubt to say Siteground is one the best hosting platform today.
    Signature
    {{ DiscussionBoard.errors[10557111].message }}
  • Profile picture of the author iconoclast
    The same thing happened to me guys. They hacked my HostGator account and planted a bunch of malicious folders and files in my various websites. Now, there are some folders I'm not sure if I should delete or not.

    I have a few questions. What kinds of files do I have to be worried about? Will they plant software that will allow them access back into my account, even if I change the password? Do you think they deleted any of my files? It's hard for me to find all of the files they've hid.

    I have backed up my site using a BackUp WordPress plugin. Will that be enough to restore my entire site, if I delete the entire thing? Thank you.

    It seems now, if you are hacked, they are referring you to their SiteLock website security service. It looks like it's $6 to clean a website but I'm not positive.

    I just paid $15 to have my account restored from a week ago. What are the chances that the hackers leave files on your server. for over a week before they erupt?
    {{ DiscussionBoard.errors[10558005].message }}

Trending Topics