I think I have been hacked.........

15 years ago

It also seems the redirect is happening from a website ar-sky(dot)ru/advanced/index.php.

I have had alook through numberous htaccess files on various websites but cannot find any redirects.

Thanks
1 reply

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652329].message }}

rts2271 15 years ago

I'm getting a canned blog with wp theme and lipsumorum text.
- Thanks
Signature

Ralph Smith
Mercenary development and deployment.
{{ DiscussionBoard.errors[2652357].message }}

~kev~

15 years ago

Your site loads fine for me - I suggest you scan your computer for malware. Get malware bytes from download.com, and do a full system scan.

Thanks

Signature

Country Lifestyle Network

{{ DiscussionBoard.errors[2652363].message }}

Alex Barboza

15 years ago

Yes, you've been hacked. Find help before you lose your rankings. It loads fine if I click th link but it redirects if I click it from google results

[ 1 ] Thanks

{{ DiscussionBoard.errors[2652371].message }}

MichaelAppleton

15 years ago

and this is when accessed from Google?

Thanks

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652372].message }}

MichaelAppleton

15 years ago

Thank you Alex. I thought as much.

Thanks
1 reply

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652373].message }}

rts2271

15 years ago

Ya somethings funky, on second try the index page is coming from that commie site. Since it looks like a default install of wp burn it and build a new one.

Thanks
1 reply

Signature

Ralph Smith
Mercenary development and deployment.

{{ DiscussionBoard.errors[2652404].message }}

MichaelAppleton

15 years ago

Originally Posted by rts2271

Ya somethings funky, on second try the index page is coming from that commie site. Since it looks like a default install of wp burn it and build a new one.

The only probably is its with every website on the account. I am just hoping HostGator can come up trumps or ill have to burn the lot.

Oh and just to spice things up abit I have a new report coming out tomorrow, this is a set back indeed.

Thanks
2 replies

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652414].message }}

IndigoJack 15 years ago

Originally Posted by MichaelAppleton

The only probably is its with every website on the account. I am just hoping HostGator can come up trumps or ill have to burn the lot.

How many websites are we talking about?

I would be very surprised if HostGator came back with anything other than "It's someone elses fault." ie. Google or you.

Check that the redirect hasn't been done on the server control panel. It would be fab if that were the case.

Other than that you will need to go through each domain/site, checking all files and changing passwords as you go.
- Thanks
Signature
IndigoJack Group
Website Hosting & SEO
Screenwriters Forum UK
{{ DiscussionBoard.errors[2652492].message }}

dv8domainsDotCom

15 years ago

Originally Posted by MichaelAppleton

The only probably is its with every website on the account. I am just hoping HostGator can come up trumps or ill have to burn the lot.

Oh and just to spice things up abit I have a new report coming out tomorrow, this is a set back indeed.

Ok, time for a simple test!
Create a new index.html (or .htm) file, have it spit out just "Hello World!" or some garbage, erase ALL files on the domain's content root, upload this file, and see if the results are the same (make sure you follow search results that only point to the domain root and not a specific file, otherwise it'll try to bypass index.html anyway). Do this test for a single domain on your host, see if it still redirects. If not, then the redirect is definitely somewhere in your files. If it DOES still redirect, well, YOU didn't program your HTML to do it, so it is likely something on hosting server that you don't have control of. Very strange, either way (and I'd hope their servers aren't infected b/c your site certainly wouldn't be the only one doing this.)

Thanks

Signature

Support a Warrior, Save Money!
Rock Bottom Prices on Domains and Website Hosting

{{ DiscussionBoard.errors[2652507].message }}

dv8domainsDotCom

15 years ago

Verified redirect as well from search results : possibly check your .htaccess file on server; to the best of my knowledge this is only place that can redirect based on referrer.
(edit; atleast that I'm aware of, I suppose other places are possible but nothing that I can think of immediately)
Good luck!

[ 1 ] Thanks

Signature

Support a Warrior, Save Money!
Rock Bottom Prices on Domains and Website Hosting

{{ DiscussionBoard.errors[2652386].message }}

MichaelAppleton

15 years ago

Thanks you dv8, I have tried this but with no luck. I am on with HostGator now.

Thanks

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652396].message }}

IndigoJack

15 years ago

Delete everything>Change all your passwords and start over.

Thanks

Signature

IndigoJack Group
Website Hosting & SEO
Screenwriters Forum UK

{{ DiscussionBoard.errors[2652417].message }}

It Should Be Easy

15 years ago

Happend to me as well, all you can do is restart everything

Thanks

Signature

Looking to connect with people

{{ DiscussionBoard.errors[2652435].message }}

MichaelAppleton

15 years ago

I have just contacted HostGator, told me I needed google to index me again as it was googles problem but then I told them again it was on websites and now they are saying they will check the htaccess files and if nothing can be found to contact google.

Looks like im on my own then

Thanks

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652439].message }}

David Allen

15 years ago

Wow, never seen that before.

I know that normally when a site gets hacked they don't touch the admin folder so as not to alert the site owner. This seems to be taking it one step further and only redirecting fro a Google search.

Crafty those Russians!!

Thanks

Signature

Powerful and Affordable Digital Vending System | Tarqo - Internet Marketing Solutions - Software and Scripts

{{ DiscussionBoard.errors[2652448].message }}

MichaelAppleton

15 years ago

Crafty Russians indeed, they have stumped me and HostGator

Thanks
1 reply

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652467].message }}

rts2271

15 years ago

It could be, but not likely, a DNS hijack. It could also be a wp install with bad permissions and a executable upload folder. If you have shell access
chmod a-rwx public_html
and cut the connection then

cp public_html/.htaccess public_html/htaccess_dirty
cp public_html/*/.htaccess public_html/*/htaccess_dirty

These 2 will go in to the main and 1 level deep and rename htaccess to htaccess_dirty for inspection.

Then you can

chmod 750 public_html

and start looking at the sites knowing no apache redirection is going on. Then it's on to clearing code and your database. Get a pot of coffee going and possibly, a couple of tranquilizers.

Thanks
1 reply

Signature

Ralph Smith
Mercenary development and deployment.

{{ DiscussionBoard.errors[2652514].message }}

MichaelAppleton

15 years ago

Originally Posted by rts2271

and start looking at the sites knowing no apache redirection is going on. Then it's on to clearing code and your database. Get a pot of coffee going and possibly, a couple of tranquilizers.

I think i would rather burn it all.

Were talking about 10 websites.

Some are dead and some are work in progress like my personal page but any of those could be causing the problem, thats alot of work.

Thanks guys for all your replies and I appreciate them all.

Thanks

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652637].message }}

MichaelAppleton

15 years ago

Does anybody know of a software I could load up on my server and search every files for the redirecting url? maybe this will help find the file causing the redirect.

Thanks everyone for your replies.

Thanks

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2652472].message }}

SteveJohnson

15 years ago

It's very easy to redirect based on referrer in PHP, doesn't have to be in .htaccess file. Also easy to do with javascript, although I don't see that in your source code.

I can pretty easily tell what's going on, probably. PM me if you still need assistance.

Thanks

Signature

The 2nd Amendment, 1789 - The Original Homeland Security.

Gun control means never having to say, "I missed you."

{{ DiscussionBoard.errors[2652754].message }}

MichaelAppleton

15 years ago

Just a quick updated, had an email back from the HostGator tech support, below is the reply.

I've located and removed the malicious redirect from your account. This was a redirect tucked into your .htaccess file that looked for certain referrers and redirected anyone coming from google, facebook, flickr, etc. to the malicious site. It looks like the hacker used an exploit in osCommerce to make these changes. I strongly urge you to switch to a different shopping cart system ASAP, as osCommerce is no longer maintained, and there are several well-known vulnerabilities in it.

I have now removed the oscommerce installation but am still getting the redirects.

I post again once I get a reply but its looking good, atleast the root of the problem has been found.

Thanks again to all who replied.

Thanks

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2654202].message }}

winebuddy

15 years ago

I had something similar happen - ALL of my sites were infected. Turned out to be an infection across all of the hosts servers.

I cleaned all of my sites almost daily but they got reinfected. It finally stopped when the hosting company GOT IT.

I suggest uploading your clean backup files.

Thanks

Signature

"Knowledge is NOT power... ACTION on Knowledge is power"

{{ DiscussionBoard.errors[2654228].message }}

MichaelAppleton

15 years ago

Thank you winebuddy, the only problem I am not sure when I last visited one of my websites from the search engines so I am unsure as to when the websites got infected.

I will leave it to HostGator and see if they can come up with the goods. I will have to postpone my report launch until next week I guess.

You know what they say, lifes a..........

Thanks

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2654276].message }}

MichaelAppleton

15 years ago

Ok another update guys, HostGator believe they have cleared all infected htaccess files twice now and each time it comes back.

Ripipip did you have the same thing? If so I will cut my loses and close the account and start over again.

Thanks
1 reply

Signature

My Top 3 Blog Posts

1. How To Start A Blog In Just 30 Minutes
2. Build High Authority Backlinks With My Top 60 Social Sharing Sites
3. My Must Have Top 10 Wordpress Plugins For 2016

Follow Me As I Build My Blog To $100K In Just 12 Months!

{{ DiscussionBoard.errors[2657303].message }}

Nathan Hangen 15 years ago

I had this problem with Media Temple, which is why I don't use them anymore.

In your case, have you scanned the database for malicious code?

You'll know it's there when it's in the bottom of every post (html editor only). If it is, you can clean it easily. If it's not there, then make sure your permissions are set correctly on that file. Lastly, it could easily be a hacked plugin.
- Thanks
{{ DiscussionBoard.errors[2657360].message }}

I think I have been hacked.........

Trending Topics

Anyone watching the Super Bowl Sunday?

How I'm Growing a Food & Nutrition Blog Using Content + SEO (Need Suggestions)

Hi Warriors, I'm new and ready to learn

What is the future of SEO and Blog?

It's already mid January...