Is my Website Hacked ??

Discussion in 'HTML & Website Design' started by selvam_cbe, Feb 10, 2008.

  1. #1
    Couple of Days Before When i try to My open website (Wordpress Powered) to update it..Suddenly my Antivirus alerts me about virus infection in my website.. Here i shown below the actual problem in my website...

    [​IMG]

    This File had Affected my index.php file and written an Iframe tag in the first line of index.php and call an external image file as shown in the above image...:confused:

    Is my website is hacked ??? How can i protect my site from hackers ?? The same thing happened to my webdirectory too..I had removed it manaually now... Suggestions Please....:eek:
     
    selvam_cbe, Feb 10, 2008 IP
  2. 2WDH.com

    2WDH.com Active Member

    Messages:
    143
    Likes Received:
    3
    Best Answers:
    5
    Trophy Points:
    68
    #2
    Hi.

    Suggestions:
    1. Change the password(s) to your account (control panel, FTP etc.), script, DB user password(s) etc.
    2. Update your scripts and modules to the latest versions.
    3. Check your site access logs and try to find security vulnerability.
     
    2WDH.com, Feb 10, 2008 IP
  3. sickanimations

    sickanimations Peon

    Messages:
    137
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #3
    I highly recommend doing the following:
    - Export your blog content (under manage)
    - Backup your themes, plugins, etc.
    - Install a fresh wordpress blog in a new directory (the latest version)
    - Restore your blog content in the new blog (that you exported somewhere else)
    - Restore your themes, etc.
    - If the problem is gone, change your links to point to the new wordpress (and create a 302 redirect) and you're set. If the problem's still there, it's probably a theme hack. Change your theme or check it for exploits.

    Good luck!
     
    sickanimations, Feb 10, 2008 IP
  4. Sherlock

    Sherlock Well-Known Member

    Messages:
    547
    Likes Received:
    15
    Best Answers:
    0
    Trophy Points:
    110
    #4
    Change passwords ASAP!
     
    Sherlock, Feb 10, 2008 IP
  5. Vbot

    Vbot Peon

    Messages:
    107
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Since you didn't provide the link to your website for us to take a look at to see what's happen. I'm guessing there's nothing wrong with your website. If I'm not mistaken then your website must be serving ads that content spyware or virus...so the virus is from the ads not from your website.
     
    Vbot, Feb 10, 2008 IP
  6. microsites

    microsites Peon

    Messages:
    149
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #6
    lol o3ned njoy

    it must be hackerscenter group haha
     
    microsites, Feb 10, 2008 IP
  7. Raining Blood

    Raining Blood Active Member

    Messages:
    260
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    58
    #7
    Yes, you were hacked.
    It's a kind of iFrame injected into your php webpages, the attacker don't need to know any of your password because it simply uses some certain exploit. I think the attacker wanted to infect your visitors with something.. trojan, keylog, or other malicious shit.
     
    Raining Blood, Feb 10, 2008 IP
  8. -Maverick-

    -Maverick- Well-Known Member

    Messages:
    491
    Likes Received:
    20
    Best Answers:
    0
    Trophy Points:
    185
    #8
    Indeed, you've been hacked. I've come across, on one of my own sites, a very similar thing. Check your access logs to find the source of the iFrame injection and don't forget to check your folder and file permissions immediately and make sure they aren't writable.
     
    -Maverick-, Feb 10, 2008 IP
  9. Greyhound

    Greyhound Banned

    Messages:
    1,637
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    78
    #9
    Either your site has been hacked or your computer got virus.
     
    Greyhound, Feb 10, 2008 IP
  10. Torans

    Torans Active Member

    Messages:
    1,418
    Likes Received:
    14
    Best Answers:
    0
    Trophy Points:
    80
    #10
    Hope you get it sorted shortly :)
     
    Torans, Feb 10, 2008 IP
  11. walkere

    walkere Active Member

    Messages:
    112
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    58
    #11
    Do you have a reference or something about this exploit?

    Be interested to learn more about how this works.

    - Walkere
     
    walkere, Feb 10, 2008 IP
  12. mcfox

    mcfox Wind Maker

    Messages:
    7,526
    Likes Received:
    716
    Best Answers:
    0
    Trophy Points:
    360
    #12
    mcfox, Feb 10, 2008 IP
  13. selvam_cbe

    selvam_cbe Peon

    Messages:
    181
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #13
    Site is http://www.dataentryjobs.co.in Pls check it and suggest your opinion about how can i protect my site.. Right now i did not display any advertisements in my website...
     
    selvam_cbe, Feb 10, 2008 IP
  14. selvam_cbe

    selvam_cbe Peon

    Messages:
    181
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #14
    I had removed manually Iframe script from index.php file ...
     
    selvam_cbe, Feb 10, 2008 IP
  15. selvam_cbe

    selvam_cbe Peon

    Messages:
    181
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #15
    selvam_cbe, Feb 10, 2008 IP
  16. mcfox

    mcfox Wind Maker

    Messages:
    7,526
    Likes Received:
    716
    Best Answers:
    0
    Trophy Points:
    360
    #16
    Best thing to do is update your Wordpress version to the very latest available.
     
    mcfox, Feb 10, 2008 IP
  17. selvam_cbe

    selvam_cbe Peon

    Messages:
    181
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #17
    I have Licenced version of Kaspersky Internet security Version 7
     
    selvam_cbe, Feb 10, 2008 IP
  18. selvam_cbe

    selvam_cbe Peon

    Messages:
    181
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #18
    What is the File permissions i offer for my WP files ?? I offer 755 for most files...
     
    selvam_cbe, Feb 10, 2008 IP
  19. Red_Virus

    Red_Virus Well-Known Member

    Messages:
    3,756
    Likes Received:
    249
    Best Answers:
    0
    Trophy Points:
    135
    #19
    I suggest that you check the footer.php files, I had this on one of my sites, where this sneaky little javascript was placed (I don't know how) which increased loading times.
     
    Red_Virus, Feb 10, 2008 IP
  20. gregorys

    gregorys Guest

    Messages:
    17
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #20
    good luck!
     
    gregorys, Feb 10, 2008 IP