Help! I think I've been hacked

by 11 replies
13
Hey guys

Just got an email from somebody saying they couldn't access one of my offers that got mailed to them via my auto responder.

Now the thing is, I use a special countdown plugin and it appears it's something to do with that as it's happening to every single offer I've used it on.

The plugin generates a special link to send your visitors to, this is one of the links.

http://www.james-scholes.com/Offer/?...YoutubeTraffic

Now instead of it taking the visitors to the "time limited" offer, it insteads download a Java file.

Could someone have a look? I really don't know what to do about this.

Cheers

James Scholes
#main internet marketing discussion forum #hacked


  • It has been hacked, your link is redirecting to
    PHP Code:
    h**p://xbok.ru/smspirat/ 
    and that then downloads the .jar file from
    PHP Code:
    h**p://m.regx.in 
  • Thought so, do you know how I can fix this?

    James Scholes
  • yes, you have been hacked. do a scan for malware, etc on your website.

    check all other sites on the same server/account as well.

    your best bet now is to remove the malware and/or restore to a recent backup.

    good luck
  • Thanks, but may I ask, how do I scan my site for malware etc?

    Cheers

    James Scholes
  • Use an ftp program and re-upload your original files, over writing what is there, and remove anything that should not be there. FileZilla can sort files per last modified, so you can see new or recently changed files, good way to get rid of crap.

    This goes to knowing your files, so you can easily spot when something has been changed, or something that isn't right.

    It's also a good idea to check, on a daily basis to make sure nothing has been done.
  • Which files, all of them... Including all the Wordpress files you upload when you first install Wordpress?

    Cheers

    James Scholes
    • [2] replies
  • Get on to your hosting company and let them know about it. If you're on shared hosting the hacker could be getting to your site via another account on the same server. If that is the case, reloading your files will be a waste of time because the hacker will just hack them again.

    It happened to me a couple of years ago, and the only way I could solve the problem was by changing hosting companies, and doing a clean install of my site on a new server.
  • It happened to me last week James, i bricked it too, just contact your hosting company, they will do a scan for you and sort it out, do you back up your stuff?

    Good luck

    Kevin
  • Hello James,

    The sad fact that your hosting account are hacked absolutely.

    The first action to do is to urgently call your web hosting support in case you use legitimate web hosting such as hostgator, hostmonster, bluehost, godaddy and other paid hosting.
    Ask them for the files backup and let this action done by an expert.

    The second sad thing is if you are using a free web hosting, you need to get a backup and open up an account in the hostgator or godaddy or other legitimate web hosting to avoid this kind of actions that destroy all the work and also affect your reputation.

    I hope this will help you in somehow.

    Feel free to thank me if you find this helping you guys
Join the discussion

Next Topics on Trending Feed