Website hacked need some help

Thinking_man_too · 29th Feb 2012, 12:36 PM

MY server at Go Daddy was hacked (a virtual server) about 8 sites had their index.php modified with a script that was identified as a Trojan:JS/BlacoleRef..

First I just deleted the script code but it reappeared in about 12 hours.

So I deleted the script code changed the file permisions and changed the password.

It has not reappeared BUT I Have a 301 redirect on one page now that seems pointless (it redirects to a non existant page on the same domain).

Anyhow i need a security expert to review the sites in question and tell me what else I need to do or what else is going on.

Mark

rr1455 · 29th Feb 2012, 08:37 PM

Sorry to hear that... I was on another hosting service and the same thing happened.
I just went to another service and result the wp sites.

Roger

kaswistry · 29th Feb 2012, 09:20 PM

The best you can do is to ask GoDaddy to restore a backup of your website prior to the hacking incident. After they've done so, you should change the password of the account and the website. Sad to say, in our experience with web security, once a platform or a website has already been compromised, the best thing would to pop-in a fresh copy of the files and THEN strengthen security. Merely trying to fix things after a hacking is not a good idea because 1) it is tedious trying to look for compromised files (and if its a large network, goodluck with that) and 2) you don't know which files are compromised and what scripts have been put in place.

hellojava · 29th Feb 2012, 09:27 PM

Install a clean copy of WP and bulletproof it. It is less tedious than going over the infected files. Also, better secure your account. Hackers might have already easy access to your web hosting account.

WebdevelopmentGroup · 29th Feb 2012, 09:36 PM

Messsage me directly. This could be a major issue for you...

CLICK HERE FOR MY WARRIOR REVIEWS

monkseo · 1st Mar 2012, 02:26 AM

If you haven't got it fixed, PM me and I can probably help you out. Usually I can get it fixed in 1 day and charge about $50 to repair and add some fixes to help prevent future hacks. I have been using wordpress for many, many years and know pretty much everything about wordpress, including how to fix hacked wordpress sites.

imsirigiri · 1st Mar 2012, 04:23 AM

Had been working and making my living with WordPress for the past 3 years. Shoot me a PM and lemme have a look at it.

indianhub · 1st Mar 2012, 10:00 AM

I can do this job. Please contact to me.

Mr.Otto · 1st Mar 2012, 10:58 AM

Install Wordpress manually next time, using the "one click" installs will leave to many traces, you can find a guide on wordpress.com. Like other wariors said get some security plugins and harden your site.

These types of hacks are scripts finding sites that has these vulnerabilities and are fully automated, that's why the hack re-appears each time.

If you need some help installing the plugins and configuring your server tell me, I will be glad to help (FREE).

Paul Gordelo · 1st Mar 2012, 11:08 AM

You can PM me for help if you are still facing issue.

29th Feb 2012, 12:36 PM	#1
Thinking_man_too Active Warrior Join Date: 2010 Location: Nebraska Posts: 91 Thanks: 3 Thanked 40 Times in 25 Posts	Website hacked need some help Share on: MY server at Go Daddy was hacked (a virtual server) about 8 sites had their index.php modified with a script that was identified as a Trojan:JS/BlacoleRef.. First I just deleted the script code but it reappeared in about 12 hours. So I deleted the script code changed the file permisions and changed the password. It has not reappeared BUT I Have a 301 redirect on one page now that seems pointless (it redirects to a non existant page on the same domain). Anyhow i need a security expert to review the sites in question and tell me what else I need to do or what else is going on. Mark

29th Feb 2012, 08:37 PM	#2
rr1455 Advanced Warrior War Room Member Join Date: 2009 Location: Scottsdale, AZ Posts: 492 Thanks: 238 Thanked 59 Times in 58 Posts	Re: Website hacked need some help Share on: Sorry to hear that... I was on another hosting service and the same thing happened. I just went to another service and result the wp sites. Roger
	Roger Rohrs (skype: Scottsdale.video) http://www.apibestinclass.com

29th Feb 2012, 09:20 PM	#3
kaswistry HyperActive Warrior Join Date: 2010 Posts: 154 Thanks: 1 Thanked 4 Times in 4 Posts	Re: Website hacked need some help Share on: The best you can do is to ask GoDaddy to restore a backup of your website prior to the hacking incident. After they've done so, you should change the password of the account and the website. Sad to say, in our experience with web security, once a platform or a website has already been compromised, the best thing would to pop-in a fresh copy of the files and THEN strengthen security. Merely trying to fix things after a hacking is not a good idea because 1) it is tedious trying to look for compromised files (and if its a large network, goodluck with that) and 2) you don't know which files are compromised and what scripts have been put in place.
	GET YOUR OWN PERSONALIZED SEO PLAN TO Beat Your Competition. Dominate Google Rankings. Convert your SEO to Sales. None of our competitors comes close to this. Not convinced? See for yourself at http://www.skylineph.net

29th Feb 2012, 09:27 PM	#4
hellojava Banned Join Date: 2007 Location: , , . Posts: 33 Thanks: 2 Thanked 1 Time in 1 Post	Re: Website hacked need some help Share on: Install a clean copy of WP and bulletproof it. It is less tedious than going over the infected files. Also, better secure your account. Hackers might have already easy access to your web hosting account.

29th Feb 2012, 09:36 PM	#5
WebdevelopmentGroup Graphics, PHP, .Net, Html War Room Member Join Date: 2011 Location: New York, NY Posts: 2,176 Thanks: 199 Thanked 170 Times in 132 Posts	Re: Website hacked need some help Share on: Messsage me directly. This could be a major issue for you... CLICK HERE FOR MY WARRIOR REVIEWS
	WebDevelopmentGroup NYC & CA- Small Business Web Development, App Development, WordPress Development, Graphic Designs, Online Marketing, Local Marketing & more!. "Call us 1.800.219.1314 or message us!". Visit us today! "Now On Live Chat Mon-Fri.". www.WebDevelopmentGroup.org (Whitelable our Services) =================================== ==> #1 OFFLINE MARKETING FORUM ON THE WEB! <== www.OFFLINEMARKETINGFORUM.com (Register Now)

1st Mar 2012, 02:26 AM	#6
monkseo Active Warrior War Room Member Join Date: 2012 Location: The Windy City Posts: 57 Thanks: 33 Thanked 11 Times in 9 Posts	Re: Website hacked need some help Share on: If you haven't got it fixed, PM me and I can probably help you out. Usually I can get it fixed in 1 day and charge about $50 to repair and add some fixes to help prevent future hacks. I have been using wordpress for many, many years and know pretty much everything about wordpress, including how to fix hacked wordpress sites.
	500 Views Per Snap

1st Mar 2012, 04:23 AM	#7
imsirigiri Verified Warrior ✔ War Room Member Join Date: 2011 Location: Firefox Browser Posts: 247 Thanks: 40 Thanked 56 Times in 51 Posts	Re: Website hacked need some help Share on: Had been working and making my living with WordPress for the past 3 years. Shoot me a PM and lemme have a look at it.
	Need a Technical Support VA on an Hourly Basis? \|\| Need AdSense Microniche Sites Research and Development? PM me.

1st Mar 2012, 10:00 AM	#8
indianhub HyperActive Warrior Join Date: 2011 Posts: 105 Thanks: 2 Thanked 0 Times in 0 Posts	Re: Website hacked need some help Share on: I can do this job. Please contact to me.

1st Mar 2012, 10:58 AM	#9
Mr.Otto Keyword Hunter War Room Member Join Date: 2009 Posts: 103 Thanks: 32 Thanked 14 Times in 14 Posts	Re: Website hacked need some help Share on: Install Wordpress manually next time, using the "one click" installs will leave to many traces, you can find a guide on wordpress.com. Like other wariors said get some security plugins and harden your site. These types of hacks are scripts finding sites that has these vulnerabilities and are fully automated, that's why the hack re-appears each time. If you need some help installing the plugins and configuring your server tell me, I will be glad to help (FREE).
	Get over 4 hours of ROYALTY FREE "Ambient Relaxation and Meditation Music" for $5 New Electronics Reviews & News

1st Mar 2012, 11:08 AM	#10
Paul Gordelo HyperActive Warrior Join Date: 2009 Posts: 110 Thanks: 0 Thanked 1 Time in 1 Post	Re: Website hacked need some help Share on: You can PM me for help if you are still facing issue.
	Read my Wordpress Tutorials Get Free WordPress setup offer Read SFDC Beginner Tutorials