Hacked Once Again

Discussion in 'Security' started by MyBigProject, Nov 22, 2010.

  1. #1
    I'm not sure how or why, but this is the second time my site has been hacked... I'm going to be taking all precautions needed to prevent this nuisance from occuring a third time so if you guys have any advice, that would be awesome.

    www.dreaminnovation.com

    The first time was easily solved by restoring my wordpress folders, but now, I don't know how to fix this. I've restored my primary theme, Thesis, but I suspect that the hackers modified something else. Is there anyway for me to pinpoint what they've done and where?
     
    MyBigProject, Nov 22, 2010 IP
  2. boggledash

    boggledash Peon

    Messages:
    6
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I don't know how you would find who they are. Someone I used to know had a similar problem and ended up closing down their website.
     
    boggledash, Nov 22, 2010 IP
  3. thedark

    thedark Well-Known Member

    Messages:
    1,346
    Likes Received:
    43
    Best Answers:
    0
    Trophy Points:
    168
    Digital Goods:
    1
    #3
    thedark, Nov 23, 2010 IP
  4. MyBigProject

    MyBigProject Peon

    Messages:
    13
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Well... I'm not expert here so I could be completely off, but what could a person achieve by editing index.php in the public html folder? Because from the times changes occured, that is the only file that differs compare to every other file.

    Please, any help would be greatly appreciated. :)
     
    MyBigProject, Nov 23, 2010 IP
  5. MyBigProject

    MyBigProject Peon

    Messages:
    13
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Yes, I confirmed it, and I, with no doubt, believe it is the index.php file. Unfortunately... I hadn't yet made a backup copy of all my files. Is there anyway to restore or get a new file of index.php?
     
    MyBigProject, Nov 23, 2010 IP
  6. rehash

    rehash Well-Known Member

    Messages:
    1,502
    Likes Received:
    30
    Best Answers:
    0
    Trophy Points:
    150
    #6
    Are you using shared hosting or dedicated?
     
    rehash, Nov 23, 2010 IP
  7. MyBigProject

    MyBigProject Peon

    Messages:
    13
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Shared hosting.
     
    MyBigProject, Nov 23, 2010 IP
  8. Dibiase

    Dibiase Guest

    Messages:
    23
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    shared hosting would work, or use the security plugin as mentioned above
     
    Dibiase, Nov 23, 2010 IP
  9. ramnet

    ramnet Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    1) download a new copy from http://wordpress.org/download/release-archive/ of the version of wordpress installed on your website.

    2) extract the index.php from that fresh copy and replace your index.php with that.

    3) change wordpress login password.
     
    ramnet, Nov 23, 2010 IP
  10. thedark

    thedark Well-Known Member

    Messages:
    1,346
    Likes Received:
    43
    Best Answers:
    0
    Trophy Points:
    168
    Digital Goods:
    1
    #10
    From now on you will backup your website often.
     
    thedark, Nov 24, 2010 IP