Site got hacked

Discussion in 'Site & Server Administration' started by Computerized, Feb 2, 2010.

  1. #1
    So I just realized a couple of my proxy sites got hacked today. I don't pay much attention to them, so they've been down for a few days now. One of them is in my signature.

    I don't have any backups since I reformatted some time ago. What do I do from here?
     
    Computerized, Feb 2, 2010 IP
  2. hostwebdata

    hostwebdata Peon

    Messages:
    264
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #2
    ask your host if they have any backup on them
     
    hostwebdata, Feb 2, 2010 IP
  3. vivideye.ca

    vivideye.ca Active Member

    Messages:
    397
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    70
    #3
    That sucks man. I hope everything works out for you. good luck.:)
     
    vivideye.ca, Feb 2, 2010 IP
  4. Mia

    Mia R.I.P. STEVE JOBS

    Messages:
    23,694
    Likes Received:
    1,167
    Best Answers:
    0
    Trophy Points:
    440
    #4
    Along with this have you checked the contents of your directory? Chances are the files are still there. Most time these hackers merely modify or replace your home page, and generally leave some back door for other activities like a repository for files, etc.
     
    Mia, Feb 2, 2010 IP
  5. PhotonVPS-Jim

    PhotonVPS-Jim Active Member

    Messages:
    412
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    55
    #5
    Check with your providers to see if they have any backups. If so see when the latest one was pulled and go from there.

    If not, your probably out of luck.
     
    PhotonVPS-Jim, Feb 2, 2010 IP
  6. neo1211

    neo1211 Active Member

    Messages:
    52
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    93
    #6
    Meh, sometimes the hackers will leave your files and just deface your site.. perhaps you could just get your hosting provider to reset your login information (assuming that's been changed) and then you can go from there -- checking if the files were actually deleted.

    Otherwise, yeah, your best bet would be to ask your provider if they have backups of your site.
     
    neo1211, Feb 2, 2010 IP
  7. FavouritesBlog

    FavouritesBlog Peon

    Messages:
    846
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    #7
    The biggest concern you have at this point is HOW they got in, i assume they have injected malicious code?

    Check your page's source code for malicious code, use a web scanner if possible.

    Backups will assist with the recovery, however the vulnerability needs to be resolved.
     
    FavouritesBlog, Feb 2, 2010 IP
  8. LostProphet

    LostProphet Peon

    Messages:
    9
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #8
    first and foremost, you need to fix your security issue, I'd worry about a backup after that. If you don't they'll just come back and hack your site again.
     
    LostProphet, Feb 3, 2010 IP
  9. happpy

    happpy Well-Known Member

    Messages:
    926
    Likes Received:
    14
    Best Answers:
    0
    Trophy Points:
    120
    #9
    if you are on shared, its your hosts responsibility.
     
    happpy, Feb 3, 2010 IP