My site got hacked - please help

rinoa3108 · #1 Sep 22, 2011, 06:41 AM

My site got hacked and it is looks like i am unable to get into the dashboard with this URL:
www.blueginger.com.au/wp-admin

Is there another way to get to the dashboard? This is the first time i have been hacked so any help/info would be much appreciated.

juggledad · #2 Sep 22, 2011, 07:43 AM

look at the site and see if there is a 'index.html' file in the wordpress root - if so, rename it to index.old and see if you can get in.

I would change all FTP passwords for your site and the cPanel password
Next I would use FTP to manually reinstall a copy of ALL the wordpress files except the wp-contents folder

I would then go thru the wp-contents folder and replace every plug in and install a fresh copy of Atahualpa (save your header images first)

That would be my starting point. -

Do you have a database backup?

rinoa3108 · #3 Sep 22, 2011, 08:38 PM

I have a version of the site at www.blueginger.judyly.com.au
Would it be possible for the URL to be redirected to here while i work on the real site?

juggledad · #4 Sep 23, 2011, 03:09 AM

you can create a file and put this in it

HTML Code:

<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <title>
    </title>
    <meta http-equiv="refresh" content="0;url=http://yourdomainname.com/" />
  </head>
  <body>
  </body>
</html>

then put it in the wordpress root older and call it 'index.html'

if it doesn't work, rename 'index.php' to 'index old.php' and see if it works then

p.s. you must have mis-spelled the URL since it gets a 'not found'

rinoa3108 · #5 Sep 27, 2011, 07:21 AM

Thank you so much - It works now. The above link is supposed to be www.blueginger.judyly.com

I have gone to www.barasia.com.au though and Firefox says that the site is deemed as an attack page and so it blocked me from viewing it. Both blueginger.com.au and barasia.com.au have the same web host. Do you think this site got hacked into as well?

juggledad · #6 Sep 27, 2011, 09:02 AM

I would suspect that it was hacked as well. Do a google search with 'wordpress what to do if your site is hacked' and read up on what you should be doing.

This is a painful thing and I wish you luck in getting it corrected. You should contact your host to see if anyone else was hacked and see what they can do to help you